From 1a5e9cfa4d43f6e03b9ec3f178a1bd123b59c0b0 Mon Sep 17 00:00:00 2001 From: Paul Howarth Date: Mon, 23 Oct 2017 18:59:32 +0100 Subject: [PATCH] Update to 2.052 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - New upstream release 2.052 - Disable NPN support if LibreSSL ≥ 2.6.1 is detected since they've replaced the functions with dummies instead of removing NPN completly or setting OPENSSL_NO_NEXTPROTONEG - t/01loadmodule.t shows more output helpful in debugging problems - Update fingerprints for external tests - Update documentation to make behavior of syswrite more clear --- ...SSL-2.052-use-system-default-SSL-version.patch | 4 ++-- ...SSL-2.052-use-system-default-cipher-list.patch | 4 ++-- perl-IO-Socket-SSL.spec | 15 ++++++++++++--- sources | 2 +- 4 files changed, 17 insertions(+), 8 deletions(-) rename IO-Socket-SSL-2.051-use-system-default-SSL-version.patch => IO-Socket-SSL-2.052-use-system-default-SSL-version.patch (95%) rename IO-Socket-SSL-2.045-use-system-default-cipher-list.patch => IO-Socket-SSL-2.052-use-system-default-cipher-list.patch (97%) diff --git a/IO-Socket-SSL-2.051-use-system-default-SSL-version.patch b/IO-Socket-SSL-2.052-use-system-default-SSL-version.patch similarity index 95% rename from IO-Socket-SSL-2.051-use-system-default-SSL-version.patch rename to IO-Socket-SSL-2.052-use-system-default-SSL-version.patch index 2e53011..f8b7248 100644 --- a/IO-Socket-SSL-2.051-use-system-default-SSL-version.patch +++ b/IO-Socket-SSL-2.052-use-system-default-SSL-version.patch @@ -1,6 +1,6 @@ --- lib/IO/Socket/SSL.pm +++ lib/IO/Socket/SSL.pm -@@ -102,7 +102,7 @@ my $algo2digest = do { +@@ -116,7 +116,7 @@ my $algo2digest = do { # global defaults my %DEFAULT_SSL_ARGS = ( SSL_check_crl => 0, @@ -9,7 +9,7 @@ SSL_verify_callback => undef, SSL_verifycn_scheme => undef, # fallback cn verification SSL_verifycn_publicsuffix => undef, # fallback default list verification -@@ -2253,7 +2253,7 @@ sub new { +@@ -2267,7 +2267,7 @@ sub new { my $ssl_op = $DEFAULT_SSL_OP; diff --git a/IO-Socket-SSL-2.045-use-system-default-cipher-list.patch b/IO-Socket-SSL-2.052-use-system-default-cipher-list.patch similarity index 97% rename from IO-Socket-SSL-2.045-use-system-default-cipher-list.patch rename to IO-Socket-SSL-2.052-use-system-default-cipher-list.patch index 1dd9c4d..3dd7eef 100644 --- a/IO-Socket-SSL-2.045-use-system-default-cipher-list.patch +++ b/IO-Socket-SSL-2.052-use-system-default-cipher-list.patch @@ -1,6 +1,6 @@ --- lib/IO/Socket/SSL.pm +++ lib/IO/Socket/SSL.pm -@@ -110,10 +110,10 @@ my %DEFAULT_SSL_ARGS = ( +@@ -124,10 +124,10 @@ my %DEFAULT_SSL_ARGS = ( SSL_npn_protocols => undef, # meaning depends whether on server or client side SSL_alpn_protocols => undef, # list of protocols we'll accept/send, for example ['http/1.1','spdy/3.1'] @@ -15,7 +15,7 @@ ); my %DEFAULT_SSL_CLIENT_ARGS = ( -@@ -123,63 +123,6 @@ my %DEFAULT_SSL_CLIENT_ARGS = ( +@@ -137,63 +137,6 @@ my %DEFAULT_SSL_CLIENT_ARGS = ( SSL_ca_file => undef, SSL_ca_path => undef, diff --git a/perl-IO-Socket-SSL.spec b/perl-IO-Socket-SSL.spec index e5be3b3..e6dfd0e 100644 --- a/perl-IO-Socket-SSL.spec +++ b/perl-IO-Socket-SSL.spec @@ -1,12 +1,12 @@ Name: perl-IO-Socket-SSL -Version: 2.051 +Version: 2.052 Release: 1%{?dist} Summary: Perl library for transparent SSL License: GPL+ or Artistic URL: http://search.cpan.org/dist/IO-Socket-SSL/ Source0: http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz -Patch0: IO-Socket-SSL-2.045-use-system-default-cipher-list.patch -Patch1: IO-Socket-SSL-2.051-use-system-default-SSL-version.patch +Patch0: IO-Socket-SSL-2.052-use-system-default-cipher-list.patch +Patch1: IO-Socket-SSL-2.052-use-system-default-SSL-version.patch BuildArch: noarch # Module Build BuildRequires: coreutils @@ -111,6 +111,15 @@ make test %{_mandir}/man3/IO::Socket::SSL::Utils.3* %changelog +* Mon Oct 23 2017 Paul Howarth - 2.052-1 +- Update to 2.052 + - Disable NPN support if LibreSSL ≥ 2.6.1 is detected since they've replaced + the functions with dummies instead of removing NPN completly or setting + OPENSSL_NO_NEXTPROTONEG + - t/01loadmodule.t shows more output helpful in debugging problems + - Update fingerprints for external tests + - Update documentation to make behavior of syswrite more clear + * Tue Sep 5 2017 Paul Howarth - 2.051-1 - Update to 2.051 - syswrite: If SSL_write sets SSL_ERROR_SYSCALL but not $! (as seen with diff --git a/sources b/sources index 32b6d97..1ea0f67 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (IO-Socket-SSL-2.051.tar.gz) = 36b7c8b0369297fdbddf48aebab5646248718f5692b358074f6de4858a4a952d8c9ac0e398e9023805f923bb52c3b9e0605d3cd5b39d67d7cf12d38aa9ee6e78 +SHA512 (IO-Socket-SSL-2.052.tar.gz) = 44a2ba94d1e9f911d6815a784263e2cddac0cea90e79cf8e267f73d8b2a3726ca9933d621bac8849a52db50bff0bd7a0d2cfd546a550f2963ea44346d3f8b600