Update to 1.999

- New upstream release 1.999
  - Make sure we don't use version 0.30 of IO::Socket::IP
  - Make sure that PeerHost is checked in all places where PeerAddr is checked,
    because these are synonyms and IO::Socket::IP prefers PeerHost while others
    prefer PeerAddr; also accept PeerService additionally to PeerPort
    (https://github.com/noxxi/p5-io-socket-ssl/issues/16)
  - Add ability to use client certificates and to overwrite hostname with
    util/analyze-ssl.pl
This commit is contained in:
Paul Howarth 2014-10-10 14:48:05 +01:00
parent 449688d154
commit 4c8c768b6e
4 changed files with 17 additions and 7 deletions

View File

@ -9,7 +9,7 @@
SSL_verify_callback => undef, SSL_verify_callback => undef,
SSL_verifycn_scheme => undef, # fallback cn verification SSL_verifycn_scheme => undef, # fallback cn verification
SSL_verifycn_publicsuffix => undef, # fallback default list verification SSL_verifycn_publicsuffix => undef, # fallback default list verification
@@ -2045,7 +2045,7 @@ WARN @@ -2054,7 +2054,7 @@ WARN
my $ssl_op = Net::SSLeay::OP_ALL(); my $ssl_op = Net::SSLeay::OP_ALL();
@ -20,7 +20,7 @@
or croak("invalid SSL_version specified"); or croak("invalid SSL_version specified");
--- lib/IO/Socket/SSL.pod --- lib/IO/Socket/SSL.pod
+++ lib/IO/Socket/SSL.pod +++ lib/IO/Socket/SSL.pod
@@ -910,7 +910,8 @@ recent versions of Net::SSLeay and opens @@ -912,7 +912,8 @@ recent versions of Net::SSLeay and opens
You can limit to set of supported protocols by adding !version separated by ':'. You can limit to set of supported protocols by adding !version separated by ':'.

View File

@ -56,7 +56,7 @@
# set values inside _init to work with perlcc, RT#95452 # set values inside _init to work with perlcc, RT#95452
--- lib/IO/Socket/SSL.pod --- lib/IO/Socket/SSL.pod
+++ lib/IO/Socket/SSL.pod +++ lib/IO/Socket/SSL.pod
@@ -929,12 +929,8 @@ documentation (L<http://www.openssl.org/ @@ -931,12 +931,8 @@ documentation (L<http://www.openssl.org/
for more details. for more details.
Unless you fail to contact your peer because of no shared ciphers it is Unless you fail to contact your peer because of no shared ciphers it is

View File

@ -1,13 +1,13 @@
Name: perl-IO-Socket-SSL Name: perl-IO-Socket-SSL
Version: 1.998 Version: 1.999
Release: 1%{?dist} Release: 1%{?dist}
Summary: Perl library for transparent SSL Summary: Perl library for transparent SSL
Group: Development/Libraries Group: Development/Libraries
License: GPL+ or Artistic License: GPL+ or Artistic
URL: http://search.cpan.org/dist/IO-Socket-SSL/ URL: http://search.cpan.org/dist/IO-Socket-SSL/
Source0: http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz Source0: http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz
Patch0: IO-Socket-SSL-1.997-use-system-default-cipher-list.patch Patch0: IO-Socket-SSL-1.999-use-system-default-cipher-list.patch
Patch1: IO-Socket-SSL-1.998-use-system-default-SSL-version.patch Patch1: IO-Socket-SSL-1.999-use-system-default-SSL-version.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu) BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu)
BuildArch: noarch BuildArch: noarch
BuildRequires: openssl >= 0.9.8 BuildRequires: openssl >= 0.9.8
@ -100,6 +100,16 @@ rm -rf %{buildroot}
%{_mandir}/man3/IO::Socket::SSL::Utils.3* %{_mandir}/man3/IO::Socket::SSL::Utils.3*
%changelog %changelog
* Fri Oct 10 2014 Paul Howarth <paul@city-fan.org> - 1.999-1
- Update to 1.999
- Make sure we don't use version 0.30 of IO::Socket::IP
- Make sure that PeerHost is checked in all places where PeerAddr is checked,
because these are synonyms and IO::Socket::IP prefers PeerHost while others
prefer PeerAddr; also accept PeerService additionally to PeerPort
(https://github.com/noxxi/p5-io-socket-ssl/issues/16)
- Add ability to use client certificates and to overwrite hostname with
util/analyze-ssl.pl
* Mon Sep 22 2014 Paul Howarth <paul@city-fan.org> - 1.998-1 * Mon Sep 22 2014 Paul Howarth <paul@city-fan.org> - 1.998-1
- Update to 1.998 - Update to 1.998
- Make client authentication work at the server side when SNI is in by use - Make client authentication work at the server side when SNI is in by use

View File

@ -1 +1 @@
00e23adb0bd80f4fa9c4336109e4f9db IO-Socket-SSL-1.998.tar.gz 4f59cb143df2cf2664c83f3360febafb IO-Socket-SSL-1.999.tar.gz