Update to 1.999
- New upstream release 1.999
- Make sure we don't use version 0.30 of IO::Socket::IP
- Make sure that PeerHost is checked in all places where PeerAddr is checked,
because these are synonyms and IO::Socket::IP prefers PeerHost while others
prefer PeerAddr; also accept PeerService additionally to PeerPort
(https://github.com/noxxi/p5-io-socket-ssl/issues/16)
- Add ability to use client certificates and to overwrite hostname with
util/analyze-ssl.pl
This commit is contained in:
parent
449688d154
commit
4c8c768b6e
@ -9,7 +9,7 @@
|
|||||||
SSL_verify_callback => undef,
|
SSL_verify_callback => undef,
|
||||||
SSL_verifycn_scheme => undef, # fallback cn verification
|
SSL_verifycn_scheme => undef, # fallback cn verification
|
||||||
SSL_verifycn_publicsuffix => undef, # fallback default list verification
|
SSL_verifycn_publicsuffix => undef, # fallback default list verification
|
||||||
@@ -2045,7 +2045,7 @@ WARN
|
@@ -2054,7 +2054,7 @@ WARN
|
||||||
|
|
||||||
my $ssl_op = Net::SSLeay::OP_ALL();
|
my $ssl_op = Net::SSLeay::OP_ALL();
|
||||||
|
|
||||||
@ -20,7 +20,7 @@
|
|||||||
or croak("invalid SSL_version specified");
|
or croak("invalid SSL_version specified");
|
||||||
--- lib/IO/Socket/SSL.pod
|
--- lib/IO/Socket/SSL.pod
|
||||||
+++ lib/IO/Socket/SSL.pod
|
+++ lib/IO/Socket/SSL.pod
|
||||||
@@ -910,7 +910,8 @@ recent versions of Net::SSLeay and opens
|
@@ -912,7 +912,8 @@ recent versions of Net::SSLeay and opens
|
||||||
|
|
||||||
You can limit to set of supported protocols by adding !version separated by ':'.
|
You can limit to set of supported protocols by adding !version separated by ':'.
|
||||||
|
|
||||||
@ -56,7 +56,7 @@
|
|||||||
# set values inside _init to work with perlcc, RT#95452
|
# set values inside _init to work with perlcc, RT#95452
|
||||||
--- lib/IO/Socket/SSL.pod
|
--- lib/IO/Socket/SSL.pod
|
||||||
+++ lib/IO/Socket/SSL.pod
|
+++ lib/IO/Socket/SSL.pod
|
||||||
@@ -929,12 +929,8 @@ documentation (L<http://www.openssl.org/
|
@@ -931,12 +931,8 @@ documentation (L<http://www.openssl.org/
|
||||||
for more details.
|
for more details.
|
||||||
|
|
||||||
Unless you fail to contact your peer because of no shared ciphers it is
|
Unless you fail to contact your peer because of no shared ciphers it is
|
||||||
@ -1,13 +1,13 @@
|
|||||||
Name: perl-IO-Socket-SSL
|
Name: perl-IO-Socket-SSL
|
||||||
Version: 1.998
|
Version: 1.999
|
||||||
Release: 1%{?dist}
|
Release: 1%{?dist}
|
||||||
Summary: Perl library for transparent SSL
|
Summary: Perl library for transparent SSL
|
||||||
Group: Development/Libraries
|
Group: Development/Libraries
|
||||||
License: GPL+ or Artistic
|
License: GPL+ or Artistic
|
||||||
URL: http://search.cpan.org/dist/IO-Socket-SSL/
|
URL: http://search.cpan.org/dist/IO-Socket-SSL/
|
||||||
Source0: http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz
|
Source0: http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz
|
||||||
Patch0: IO-Socket-SSL-1.997-use-system-default-cipher-list.patch
|
Patch0: IO-Socket-SSL-1.999-use-system-default-cipher-list.patch
|
||||||
Patch1: IO-Socket-SSL-1.998-use-system-default-SSL-version.patch
|
Patch1: IO-Socket-SSL-1.999-use-system-default-SSL-version.patch
|
||||||
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu)
|
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu)
|
||||||
BuildArch: noarch
|
BuildArch: noarch
|
||||||
BuildRequires: openssl >= 0.9.8
|
BuildRequires: openssl >= 0.9.8
|
||||||
@ -100,6 +100,16 @@ rm -rf %{buildroot}
|
|||||||
%{_mandir}/man3/IO::Socket::SSL::Utils.3*
|
%{_mandir}/man3/IO::Socket::SSL::Utils.3*
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Fri Oct 10 2014 Paul Howarth <paul@city-fan.org> - 1.999-1
|
||||||
|
- Update to 1.999
|
||||||
|
- Make sure we don't use version 0.30 of IO::Socket::IP
|
||||||
|
- Make sure that PeerHost is checked in all places where PeerAddr is checked,
|
||||||
|
because these are synonyms and IO::Socket::IP prefers PeerHost while others
|
||||||
|
prefer PeerAddr; also accept PeerService additionally to PeerPort
|
||||||
|
(https://github.com/noxxi/p5-io-socket-ssl/issues/16)
|
||||||
|
- Add ability to use client certificates and to overwrite hostname with
|
||||||
|
util/analyze-ssl.pl
|
||||||
|
|
||||||
* Mon Sep 22 2014 Paul Howarth <paul@city-fan.org> - 1.998-1
|
* Mon Sep 22 2014 Paul Howarth <paul@city-fan.org> - 1.998-1
|
||||||
- Update to 1.998
|
- Update to 1.998
|
||||||
- Make client authentication work at the server side when SNI is in by use
|
- Make client authentication work at the server side when SNI is in by use
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user