Update to 2.039
- New upstream release 2.039 - OpenSSL 1.1.0c changed the behavior of SSL_read so that it now returns -1 on EOF without proper SSL shutdown; since it looks like that this behavior will be kept at least for 1.1.1+, adapt to the changed API by treating errno=NOERR on SSL_ERROR_SYSCALL as EOF - Update patches as needed
This commit is contained in:
parent
4b64c34a03
commit
48b55376ef
@ -1,6 +1,6 @@
|
|||||||
--- lib/IO/Socket/SSL.pm
|
--- lib/IO/Socket/SSL.pm
|
||||||
+++ lib/IO/Socket/SSL.pm
|
+++ lib/IO/Socket/SSL.pm
|
||||||
@@ -96,7 +96,7 @@ my $algo2digest = do {
|
@@ -97,7 +97,7 @@ my $algo2digest = do {
|
||||||
# global defaults
|
# global defaults
|
||||||
my %DEFAULT_SSL_ARGS = (
|
my %DEFAULT_SSL_ARGS = (
|
||||||
SSL_check_crl => 0,
|
SSL_check_crl => 0,
|
||||||
@ -9,7 +9,7 @@
|
|||||||
SSL_verify_callback => undef,
|
SSL_verify_callback => undef,
|
||||||
SSL_verifycn_scheme => undef, # fallback cn verification
|
SSL_verifycn_scheme => undef, # fallback cn verification
|
||||||
SSL_verifycn_publicsuffix => undef, # fallback default list verification
|
SSL_verifycn_publicsuffix => undef, # fallback default list verification
|
||||||
@@ -2206,7 +2206,7 @@ sub new {
|
@@ -2214,7 +2214,7 @@ sub new {
|
||||||
|
|
||||||
my $ssl_op = $DEFAULT_SSL_OP;
|
my $ssl_op = $DEFAULT_SSL_OP;
|
||||||
|
|
@ -1,6 +1,6 @@
|
|||||||
--- lib/IO/Socket/SSL.pm
|
--- lib/IO/Socket/SSL.pm
|
||||||
+++ lib/IO/Socket/SSL.pm
|
+++ lib/IO/Socket/SSL.pm
|
||||||
@@ -104,10 +104,10 @@ my %DEFAULT_SSL_ARGS = (
|
@@ -105,10 +105,10 @@ my %DEFAULT_SSL_ARGS = (
|
||||||
SSL_npn_protocols => undef, # meaning depends whether on server or client side
|
SSL_npn_protocols => undef, # meaning depends whether on server or client side
|
||||||
SSL_alpn_protocols => undef, # list of protocols we'll accept/send, for example ['http/1.1','spdy/3.1']
|
SSL_alpn_protocols => undef, # list of protocols we'll accept/send, for example ['http/1.1','spdy/3.1']
|
||||||
|
|
||||||
@ -15,7 +15,7 @@
|
|||||||
);
|
);
|
||||||
|
|
||||||
my %DEFAULT_SSL_CLIENT_ARGS = (
|
my %DEFAULT_SSL_CLIENT_ARGS = (
|
||||||
@@ -117,63 +117,6 @@ my %DEFAULT_SSL_CLIENT_ARGS = (
|
@@ -118,63 +118,6 @@ my %DEFAULT_SSL_CLIENT_ARGS = (
|
||||||
SSL_ca_file => undef,
|
SSL_ca_file => undef,
|
||||||
SSL_ca_path => undef,
|
SSL_ca_path => undef,
|
||||||
|
|
@ -1,13 +1,13 @@
|
|||||||
Name: perl-IO-Socket-SSL
|
Name: perl-IO-Socket-SSL
|
||||||
Version: 2.038
|
Version: 2.039
|
||||||
Release: 1%{?dist}
|
Release: 1%{?dist}
|
||||||
Summary: Perl library for transparent SSL
|
Summary: Perl library for transparent SSL
|
||||||
Group: Development/Libraries
|
Group: Development/Libraries
|
||||||
License: GPL+ or Artistic
|
License: GPL+ or Artistic
|
||||||
URL: http://search.cpan.org/dist/IO-Socket-SSL/
|
URL: http://search.cpan.org/dist/IO-Socket-SSL/
|
||||||
Source0: http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz
|
Source0: http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz
|
||||||
Patch0: IO-Socket-SSL-2.038-use-system-default-cipher-list.patch
|
Patch0: IO-Socket-SSL-2.039-use-system-default-cipher-list.patch
|
||||||
Patch1: IO-Socket-SSL-2.038-use-system-default-SSL-version.patch
|
Patch1: IO-Socket-SSL-2.039-use-system-default-SSL-version.patch
|
||||||
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu)
|
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu)
|
||||||
BuildArch: noarch
|
BuildArch: noarch
|
||||||
# Module Build
|
# Module Build
|
||||||
@ -116,6 +116,14 @@ rm -rf %{buildroot}
|
|||||||
%{_mandir}/man3/IO::Socket::SSL::Utils.3*
|
%{_mandir}/man3/IO::Socket::SSL::Utils.3*
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Nov 21 2016 Paul Howarth <paul@city-fan.org> - 2.039-1
|
||||||
|
- Update to 2.039
|
||||||
|
- OpenSSL 1.1.0c changed the behavior of SSL_read so that it now returns -1
|
||||||
|
on EOF without proper SSL shutdown; since it looks like that this behavior
|
||||||
|
will be kept at least for 1.1.1+, adapt to the changed API by treating
|
||||||
|
errno=NOERR on SSL_ERROR_SYSCALL as EOF
|
||||||
|
- Update patches as needed
|
||||||
|
|
||||||
* Mon Sep 19 2016 Paul Howarth <paul@city-fan.org> - 2.038-1
|
* Mon Sep 19 2016 Paul Howarth <paul@city-fan.org> - 2.038-1
|
||||||
- Update to 2.038
|
- Update to 2.038
|
||||||
- Restrict session ticket callback to Net::SSLeay 1.79+ since version before
|
- Restrict session ticket callback to Net::SSLeay 1.79+ since version before
|
||||||
|
Loading…
Reference in New Issue
Block a user