diff --git a/.gitignore b/.gitignore
index dbdc9ea..36f3e5c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-/IO-Socket-SSL-1.34.tar.gz
+/IO-Socket-SSL-1.35.tar.gz
diff --git a/perl-IO-Socket-SSL.spec b/perl-IO-Socket-SSL.spec
index 2c25ae2..445b417 100644
--- a/perl-IO-Socket-SSL.spec
+++ b/perl-IO-Socket-SSL.spec
@@ -4,7 +4,7 @@
 #
 
 Name:		perl-IO-Socket-SSL
-Version:	1.34
+Version:	1.35
 Release:	1%{?dist}
 Summary:	Perl library for transparent SSL
 Group:		Development/Libraries
@@ -61,6 +61,12 @@ done
 %{_mandir}/man3/IO::Socket::SSL.3pm*
 
 %changelog
+* Mon Dec  6 2010 Paul Howarth <paul@city-fan.org> - 1.35-1
+- Update to 1.35
+  - if verify_mode is not VERIFY_NONE and the ca_file/ca_path cannot be
+    verified as valid, it will no longer fall back to VERIFY_NONE but throw an
+    error (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606058)
+
 * Tue Nov  2 2010 Paul Howarth <paul@city-fan.org> - 1.34-1
 - Update to 1.34
   - schema http for certificate verification changed to wildcards_in_cn=1
diff --git a/sources b/sources
index c48f473..b6567d5 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-c42dfa4172e6ee3673b5ead6709f7c04  IO-Socket-SSL-1.34.tar.gz
+814126aa56e687a3ccc341be35c16cc5  IO-Socket-SSL-1.35.tar.gz