Update to 2.009

- New upstream release 2.009
  - Remove util/analyze.pl; this tool is now together with other SSL tools at
    https://github.com/noxxi/p5-ssl-tools
  - Added ALPN support (needs OpenSSL1.02, Net::SSLeay 1.56+) (CPAN RT#101452)

IO-Socket-SSL-2.009-use-system-default-SSL-version.patch

@@ -1,6 +1,6 @@
 --- lib/IO/Socket/SSL.pm
 +++ lib/IO/Socket/SSL.pm
-@@ -83,7 +83,7 @@ my $algo2digest = do {
+@@ -85,7 +85,7 @@ my $algo2digest = do {
  # global defaults
  my %DEFAULT_SSL_ARGS = (
      SSL_check_crl => 0,
@@ -9,7 +9,7 @@
      SSL_verify_callback => undef,
      SSL_verifycn_scheme => undef,  # fallback cn verification
      SSL_verifycn_publicsuffix => undef,  # fallback default list verification
-@@ -2069,7 +2069,7 @@ WARN
+@@ -2086,7 +2086,7 @@ WARN
      $ssl_op |= &Net::SSLeay::OP_SINGLE_DH_USE;
      $ssl_op |= &Net::SSLeay::OP_SINGLE_ECDH_USE if $can_ecdh;
  

IO-Socket-SSL-2.009-use-system-default-cipher-list.patch

@@ -1,9 +1,9 @@
 --- lib/IO/Socket/SSL.pm
 +++ lib/IO/Socket/SSL.pm
-@@ -89,9 +89,7 @@ my %DEFAULT_SSL_ARGS = (
+@@ -92,9 +92,7 @@ my %DEFAULT_SSL_ARGS = (
-     SSL_verifycn_publicsuffix => undef,  # fallback default list verification
      #SSL_verifycn_name => undef,   # use from PeerAddr/PeerHost - do not override in set_args_filter_hack 'use_defaults'
      SSL_npn_protocols => undef,    # meaning depends whether on server or client side
+     SSL_alpn_protocols => undef,   # list of protocols we'll accept/send, for example ['http/1.1','spdy/3.1']
 -    SSL_cipher_list =>
 -	'EECDH+AESGCM+ECDSA EECDH+AESGCM EECDH+ECDSA +AES256 EECDH EDH+AESGCM '.
 -	'EDH ALL +SHA +3DES +RC4 !LOW !EXP !eNULL !aNULL !DES !MD5 !PSK !SRP',
@@ -11,7 +11,7 @@
  );
  
  my %DEFAULT_SSL_CLIENT_ARGS = (
-@@ -101,42 +99,6 @@ my %DEFAULT_SSL_CLIENT_ARGS = (
+@@ -104,42 +102,6 @@ my %DEFAULT_SSL_CLIENT_ARGS = (
      SSL_ca_file => undef,
      SSL_ca_path => undef,
  

perl-IO-Socket-SSL.spec

@@ -1,13 +1,13 @@
 Name:		perl-IO-Socket-SSL
-Version:	2.008
+Version:	2.009
 Release:	1%{?dist}
 Summary:	Perl library for transparent SSL
 Group:		Development/Libraries
 License:	GPL+ or Artistic
 URL:		http://search.cpan.org/dist/IO-Socket-SSL/
 Source0:	http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz
-Patch0:		IO-Socket-SSL-2.006-use-system-default-cipher-list.patch
+Patch0:		IO-Socket-SSL-2.009-use-system-default-cipher-list.patch
-Patch1:		IO-Socket-SSL-2.007-use-system-default-SSL-version.patch
+Patch1:		IO-Socket-SSL-2.009-use-system-default-SSL-version.patch
 BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu)
 BuildArch:	noarch
 # Module Build
@@ -100,7 +100,7 @@ make test
 rm -rf %{buildroot}
 
 %files
-%doc BUGS Changes README docs/ certs/ example/ util/
+%doc BUGS Changes README docs/ certs/ example/
 %dir %{perl_vendorlib}/IO/
 %dir %{perl_vendorlib}/IO/Socket/
 %doc %{perl_vendorlib}/IO/Socket/SSL.pod
@@ -112,6 +112,12 @@ rm -rf %{buildroot}
 %{_mandir}/man3/IO::Socket::SSL::Utils.3*
 
 %changelog
+* Mon Jan 12 2015 Paul Howarth <paul@city-fan.org> - 2.009-1
+- Update to 2.009
+  - Remove util/analyze.pl; this tool is now together with other SSL tools at
+    https://github.com/noxxi/p5-ssl-tools
+  - Added ALPN support (needs OpenSSL1.02, Net::SSLeay 1.56+) (CPAN RT#101452)
+
 * Thu Dec 18 2014 Paul Howarth <paul@city-fan.org> - 2.008-1
 - Update to 2.008
   - Work around recent OCSP verification errors for revoked.grc.com (badly

sources

@@ -1 +1 @@
-b4ed0fede4661256dd68f085eb6df021  IO-Socket-SSL-2.008.tar.gz
+15be23e33f8183cb424254ea6a7b3bc0  IO-Socket-SSL-2.009.tar.gz