Update to 2.023
- New upstream release 2.023 - OpenSSL 1.0.2f changed the behavior of SSL shutdown in case the TLS connection was not fully established, which somehow resulted in Net::SSLeay::shutdown returning 0 (i.e. keep trying) and hence an endless loop; it will now ignore this result in case the TLS connection was not yet established and consider the TLS connection closed instead - Update patches as needed
This commit is contained in:
parent
5b16a21796
commit
c1f1b41420
@ -9,7 +9,7 @@
|
|||||||
SSL_verify_callback => undef,
|
SSL_verify_callback => undef,
|
||||||
SSL_verifycn_scheme => undef, # fallback cn verification
|
SSL_verifycn_scheme => undef, # fallback cn verification
|
||||||
SSL_verifycn_publicsuffix => undef, # fallback default list verification
|
SSL_verifycn_publicsuffix => undef, # fallback default list verification
|
||||||
@@ -2167,7 +2167,7 @@ sub new {
|
@@ -2172,7 +2172,7 @@ sub new {
|
||||||
$ssl_op |= &Net::SSLeay::OP_SINGLE_DH_USE;
|
$ssl_op |= &Net::SSLeay::OP_SINGLE_DH_USE;
|
||||||
$ssl_op |= &Net::SSLeay::OP_SINGLE_ECDH_USE if $can_ecdh;
|
$ssl_op |= &Net::SSLeay::OP_SINGLE_ECDH_USE if $can_ecdh;
|
||||||
|
|
@ -1,5 +1,5 @@
|
|||||||
Name: perl-IO-Socket-SSL
|
Name: perl-IO-Socket-SSL
|
||||||
Version: 2.022
|
Version: 2.023
|
||||||
Release: 1%{?dist}
|
Release: 1%{?dist}
|
||||||
Summary: Perl library for transparent SSL
|
Summary: Perl library for transparent SSL
|
||||||
Group: Development/Libraries
|
Group: Development/Libraries
|
||||||
@ -7,7 +7,7 @@ License: GPL+ or Artistic
|
|||||||
URL: http://search.cpan.org/dist/IO-Socket-SSL/
|
URL: http://search.cpan.org/dist/IO-Socket-SSL/
|
||||||
Source0: http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz
|
Source0: http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz
|
||||||
Patch0: IO-Socket-SSL-2.021-use-system-default-cipher-list.patch
|
Patch0: IO-Socket-SSL-2.021-use-system-default-cipher-list.patch
|
||||||
Patch1: IO-Socket-SSL-2.021-use-system-default-SSL-version.patch
|
Patch1: IO-Socket-SSL-2.023-use-system-default-SSL-version.patch
|
||||||
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu)
|
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu)
|
||||||
BuildArch: noarch
|
BuildArch: noarch
|
||||||
# Module Build
|
# Module Build
|
||||||
@ -115,6 +115,15 @@ rm -rf %{buildroot}
|
|||||||
%{_mandir}/man3/IO::Socket::SSL::Utils.3*
|
%{_mandir}/man3/IO::Socket::SSL::Utils.3*
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Sat Jan 30 2016 Paul Howarth <paul@city-fan.org> - 2.023-1
|
||||||
|
- Update to 2.023
|
||||||
|
- OpenSSL 1.0.2f changed the behavior of SSL shutdown in case the TLS
|
||||||
|
connection was not fully established, which somehow resulted in
|
||||||
|
Net::SSLeay::shutdown returning 0 (i.e. keep trying) and hence an endless
|
||||||
|
loop; it will now ignore this result in case the TLS connection was not
|
||||||
|
yet established and consider the TLS connection closed instead
|
||||||
|
- Update patches as needed
|
||||||
|
|
||||||
* Thu Dec 10 2015 Paul Howarth <paul@city-fan.org> - 2.022-1
|
* Thu Dec 10 2015 Paul Howarth <paul@city-fan.org> - 2.022-1
|
||||||
- Update to 2.022
|
- Update to 2.022
|
||||||
- Fix stringification of IPv6 inside subjectAltNames in Utils::CERT_asHash
|
- Fix stringification of IPv6 inside subjectAltNames in Utils::CERT_asHash
|
||||||
|
Loading…
Reference in New Issue
Block a user