JRuby uses krypt to provide pkcs5, via require 'krypt/ossl' in lib/ruby/shared/openssl.rb. However, the jruby-openssl.rb file we load from the gem does not have this line, and so OpenSSL::PKCS5 is never defined.

A workaround is to require krypt/ossl yourself.

Proper gemification of jruby-openssl would fix this, as would simply adding the require to the gem's jruby-openssl.rb file, but we also need to ensure the depdency comes along for pre-1.7 JRuby (and we should probably be treating krypt as a default gem anyway).

Unsure of the status of gemification of krypt. Can you comment, @emboss?