From d492339cf42604df167dca764ab8c09b113f9864 Mon Sep 17 00:00:00 2001 From: Troy Dawson Date: Wed, 14 Oct 2020 13:16:20 -0700 Subject: [PATCH] RHEL 9.0.0 Alpha bootstrap The content of this branch was automatically imported from Fedora ELN with the following as its source: https://src.fedoraproject.org/rpms/perl-LWP-Protocol-https#b32492d77d6d3332ad704134f3df62898b6cb1d4 --- .gitignore | 6 + ...n-t-disale-verification-if-only-host.patch | 30 +++ ...x-test-make-it-workable-for-Crypt-SS.patch | 51 +++++ perl-LWP-Protocol-https.rpmlintrc | 2 + perl-LWP-Protocol-https.spec | 201 ++++++++++++++++++ sources | 1 + 6 files changed, 291 insertions(+) create mode 100644 LWP-Protocol-https-6.06-Debian-746576-don-t-disale-verification-if-only-host.patch create mode 100644 LWP-Protocol-https-6.06-Debian-746576-fix-test-make-it-workable-for-Crypt-SS.patch create mode 100644 perl-LWP-Protocol-https.rpmlintrc create mode 100644 perl-LWP-Protocol-https.spec create mode 100644 sources diff --git a/.gitignore b/.gitignore index e69de29..e28faef 100644 --- a/.gitignore +++ b/.gitignore @@ -0,0 +1,6 @@ +/LWP-Protocol-https-6.02.tar.gz +/LWP-Protocol-https-6.03.tar.gz +/LWP-Protocol-https-6.04.tar.gz +/LWP-Protocol-https-6.06.tar.gz +/LWP-Protocol-https-6.07.tar.gz +/LWP-Protocol-https-6.09.tar.gz diff --git a/LWP-Protocol-https-6.06-Debian-746576-don-t-disale-verification-if-only-host.patch b/LWP-Protocol-https-6.06-Debian-746576-don-t-disale-verification-if-only-host.patch new file mode 100644 index 0000000..31521ff --- /dev/null +++ b/LWP-Protocol-https-6.06-Debian-746576-don-t-disale-verification-if-only-host.patch @@ -0,0 +1,30 @@ +From 1b924708663f457a4f7c25ed35d7dfb3bb5b334d Mon Sep 17 00:00:00 2001 +From: Steffen Ullrich +Date: Sat, 3 May 2014 23:04:36 +0200 +Subject: [PATCH 1/2] Debian #746576 - don't disale verification if only + hostnames should not be verified +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Signed-off-by: Petr Písař +--- + lib/LWP/Protocol/https.pm | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/lib/LWP/Protocol/https.pm b/lib/LWP/Protocol/https.pm +index a707917..8c87e81 100644 +--- a/lib/LWP/Protocol/https.pm ++++ b/lib/LWP/Protocol/https.pm +@@ -21,7 +21,7 @@ sub _extra_sock_opts + $ssl_opts{SSL_verifycn_scheme} = 'www'; + } + else { +- $ssl_opts{SSL_verify_mode} = 0; ++ $ssl_opts{SSL_verifycn_scheme} = 'none'; + } + if ($ssl_opts{SSL_verify_mode}) { + unless (exists $ssl_opts{SSL_ca_file} || exists $ssl_opts{SSL_ca_path}) { +-- +1.9.0 + diff --git a/LWP-Protocol-https-6.06-Debian-746576-fix-test-make-it-workable-for-Crypt-SS.patch b/LWP-Protocol-https-6.06-Debian-746576-fix-test-make-it-workable-for-Crypt-SS.patch new file mode 100644 index 0000000..1e85dbe --- /dev/null +++ b/LWP-Protocol-https-6.06-Debian-746576-fix-test-make-it-workable-for-Crypt-SS.patch @@ -0,0 +1,51 @@ +From 6b5c876de80451ee54de5d853de37a62e26bf6fe Mon Sep 17 00:00:00 2001 +From: Steffen Ullrich +Date: Sun, 4 May 2014 09:14:13 +0200 +Subject: [PATCH 2/2] Debian #746576 - fix test, make it workable for + Crypt::SSLeay/Net::SSL too +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Signed-off-by: Petr Písař +--- + lib/LWP/Protocol/https.pm | 6 +++++- + t/https_proxy.t | 5 ++++- + 2 files changed, 9 insertions(+), 2 deletions(-) + +diff --git a/lib/LWP/Protocol/https.pm b/lib/LWP/Protocol/https.pm +index 8c87e81..6223ddf 100644 +--- a/lib/LWP/Protocol/https.pm ++++ b/lib/LWP/Protocol/https.pm +@@ -21,7 +21,11 @@ sub _extra_sock_opts + $ssl_opts{SSL_verifycn_scheme} = 'www'; + } + else { +- $ssl_opts{SSL_verifycn_scheme} = 'none'; ++ if ( $Net::HTTPS::SSL_SOCKET_CLASS eq 'Net::SSL' ) { ++ $ssl_opts{SSL_verifycn_scheme} = ''; ++ } else { ++ $ssl_opts{SSL_verifycn_scheme} = 'none'; ++ } + } + if ($ssl_opts{SSL_verify_mode}) { + unless (exists $ssl_opts{SSL_ca_file} || exists $ssl_opts{SSL_ca_path}) { +diff --git a/t/https_proxy.t b/t/https_proxy.t +index 5196960..c78345b 100644 +--- a/t/https_proxy.t ++++ b/t/https_proxy.t +@@ -66,7 +66,10 @@ my %ua; + $ua{noproxy} = LWP::UserAgent->new( + keep_alive => 10, # size of connection cache + # server does not know the expected name and returns generic certificate +- ssl_opts => { verify_hostname => 0 } ++ ssl_opts => { ++ verify_hostname => 0, ++ SSL_ca_file => $cafile, ++ } + ); + + $ua{proxy} = LWP::UserAgent->new( +-- +1.9.0 + diff --git a/perl-LWP-Protocol-https.rpmlintrc b/perl-LWP-Protocol-https.rpmlintrc new file mode 100644 index 0000000..77f1ae0 --- /dev/null +++ b/perl-LWP-Protocol-https.rpmlintrc @@ -0,0 +1,2 @@ +from Config import * +addFilter("spelling-error .* UserAgent"); diff --git a/perl-LWP-Protocol-https.spec b/perl-LWP-Protocol-https.spec new file mode 100644 index 0000000..930f59a --- /dev/null +++ b/perl-LWP-Protocol-https.spec @@ -0,0 +1,201 @@ +# Perform tests that need the Internet +%bcond_with perl_LWP_Protocol_https_enables_internet_test + +Name: perl-LWP-Protocol-https +Version: 6.09 +Release: 3%{?dist} +Summary: Provide HTTPS support for LWP::UserAgent +License: GPL+ or Artistic +URL: https://metacpan.org/release/LWP-Protocol-https +Source0: https://cpan.metacpan.org/authors/id/O/OA/OALDERS/LWP-Protocol-https-%{version}.tar.gz +# Fix CVE-2014-3230, bug #1094442, +# proposed in https://github.com/libwww-perl/lwp-protocol-https/pull/14 +Patch0: LWP-Protocol-https-6.06-Debian-746576-don-t-disale-verification-if-only-host.patch +# Fix CVE-2014-3230, bug #1094442, +# proposed in https://github.com/libwww-perl/lwp-protocol-https/pull/14 +Patch1: LWP-Protocol-https-6.06-Debian-746576-fix-test-make-it-workable-for-Crypt-SS.patch +BuildArch: noarch +BuildRequires: coreutils +BuildRequires: make +BuildRequires: perl-generators +BuildRequires: perl-interpreter +BuildRequires: perl(:VERSION) >= 5.8.1 +BuildRequires: perl(ExtUtils::MakeMaker) >= 6.76 +BuildRequires: perl(strict) +BuildRequires: perl(warnings) +# Run-time: +BuildRequires: perl(base) +BuildRequires: perl(IO::Socket::SSL) >= 1.54 +BuildRequires: perl(LWP::Protocol::http) +BuildRequires: perl(LWP::Protocol::http::SocketMethods) +BuildRequires: perl(Mozilla::CA) >= 20180117 +BuildRequires: perl(Net::HTTPS) >= 6 +# Tests: +BuildRequires: perl(blib) +BuildRequires: perl(File::Spec) +BuildRequires: perl(File::Temp) +BuildRequires: perl(IO::Select) +BuildRequires: perl(IO::Socket::INET) +BuildRequires: perl(LWP::UserAgent) >= 6.06 +BuildRequires: perl(Socket) +BuildRequires: perl(Test::More) +%if %{with perl_LWP_Protocol_https_enables_internet_test} +BuildRequires: perl(Test::RequiresInternet) +%endif +# Optional tests: +BuildRequires: perl(IO::Socket::SSL) >= 1.953 +BuildRequires: perl(IO::Socket::SSL::Utils) +Requires: perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version)) +Requires: perl(IO::Socket::SSL) >= 1.54 +Requires: perl(Mozilla::CA) >= 20180117 +Requires: perl(Net::HTTPS) >= 6 + +# Remove underspecified dependencies +%global __requires_exclude %{?__requires_exclude:%__requires_exclude|}^perl\\(Net::HTTPS\\)\\s*$ + +%description +The LWP::Protocol::https module provides support for using HTTPS schemed +URLs with LWP. This module is a plug-in to the LWP protocol handling, so +you don't use it directly. Once the module is installed LWP is able to +access sites using HTTP over SSL/TLS. + +%prep +%setup -q -n LWP-Protocol-https-%{version} +%patch0 -p1 +%patch1 -p1 +%if !%{with perl_LWP_Protocol_https_enables_internet_test} +rm t/apache.t +perl -i -ne 'print $_ unless m{^t/apache.t}' MANIFEST +%endif + +%build +perl Makefile.PL NO_PACKLIST=1 NO_PERLLOCAL=1 INSTALLDIRS=vendor +%{make_build} + +%install +%{make_install} +%{_fixperms} $RPM_BUILD_ROOT/* + +%check +make test + +%files +%license LICENSE +%doc Changes +%{perl_vendorlib}/* +%{_mandir}/man3/* + +%changelog +* Tue Jul 28 2020 Fedora Release Engineering - 6.09-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Mon Jul 20 2020 Petr Pisar - 6.09-2 +- Remove unused build-time dependencies + +* Fri Jul 17 2020 Jitka Plesnikova - 6.09-1 +- 6.09 bump + +* Tue Jun 23 2020 Jitka Plesnikova - 6.07-12 +- Perl 5.32 rebuild + +* Fri Feb 14 2020 Petr Pisar - 6.07-11 +- Disable tests that need the Internet by default + +* Thu Jan 30 2020 Fedora Release Engineering - 6.07-10 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Fri Jul 26 2019 Fedora Release Engineering - 6.07-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Fri May 31 2019 Jitka Plesnikova - 6.07-8 +- Perl 5.30 rebuild + +* Fri Feb 01 2019 Fedora Release Engineering - 6.07-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Fri Jul 13 2018 Fedora Release Engineering - 6.07-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Thu Jun 28 2018 Jitka Plesnikova - 6.07-5 +- Perl 5.28 rebuild + +* Thu Feb 08 2018 Fedora Release Engineering - 6.07-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Thu Jul 27 2017 Fedora Release Engineering - 6.07-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Mon Jun 05 2017 Jitka Plesnikova - 6.07-2 +- Perl 5.26 rebuild + +* Mon Feb 20 2017 Petr Pisar - 6.07-1 +- 6.07 bump + +* Sat Feb 11 2017 Fedora Release Engineering - 6.06-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Mon May 16 2016 Jitka Plesnikova - 6.06-8 +- Perl 5.24 rebuild + +* Thu Feb 04 2016 Fedora Release Engineering - 6.06-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Thu Jun 18 2015 Fedora Release Engineering - 6.06-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Sat Jun 06 2015 Jitka Plesnikova - 6.06-5 +- Perl 5.22 rebuild + +* Thu Aug 28 2014 Jitka Plesnikova - 6.06-4 +- Perl 5.20 rebuild + +* Sat Jun 07 2014 Fedora Release Engineering - 6.06-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Mon May 12 2014 Petr Pisar - 6.06-2 +- Fix CVE-2014-3230 (incorrect handling of SSL certificate verification if + HTTPS_CA_DIR or HTTPS_CA_FILE environment variables are set) (bug #1094442) + +* Wed Apr 23 2014 Petr Pisar - 6.06-1 +- 6.06 bump + +* Thu Jan 16 2014 Petr Pisar - 6.04-4 +- Modernize spec file + +* Sat Aug 03 2013 Fedora Release Engineering - 6.04-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + +* Tue Jul 23 2013 Petr Pisar - 6.04-2 +- Perl 5.18 rebuild + +* Thu May 02 2013 Petr Pisar - 6.04-1 +- 6.04 bump + +* Thu Feb 14 2013 Fedora Release Engineering - 6.03-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + +* Fri Jul 20 2012 Fedora Release Engineering - 6.03-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Fri Jun 15 2012 Petr Pisar - 6.03-2 +- Perl 5.16 rebuild + +* Mon Feb 20 2012 Petr Pisar - 6.03-1 +- 6.03 bump +- Enable tests by default, they detect connectivity now + +* Fri Jan 13 2012 Fedora Release Engineering - 6.02-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Mon Jul 25 2011 Petr Pisar - 6.02-4 +- RPM 4.9 dependency filtering added + +* Fri Jun 17 2011 Marcela Mašláňová - 6.02-3 +- Perl mass rebuild + +* Tue Mar 29 2011 Petr Pisar - 6.02-2 +- Disable tests because they need network access + +* Mon Mar 28 2011 Petr Pisar 6.02-1 +- Specfile autogenerated by cpanspec 1.78. +- Remove BuildRoot stuff diff --git a/sources b/sources new file mode 100644 index 0000000..ff30739 --- /dev/null +++ b/sources @@ -0,0 +1 @@ +SHA512 (LWP-Protocol-https-6.09.tar.gz) = 53e1ec7dec04988c3c7fa70a5f0ed60c38270bbbb9fe99a7cfeb84db0c40f5ff6f6f94aa4aa639498af6d0bc201dcb7e6e3491bae96411250ef50b010d32add1