Update to 1.63

- New upstream release 1.63
  - Improvements to OCSP support: it turns out that some CAs (like Verisign)
    sign the OCSP response with the CA we have in the trust store and don't
    attach this certifcate in the response, but OpenSSL by itself only
    considers the certificates included in the response and
    SSL_OCSP_response_verify added the certificates in the chain too, so now
    we also add the trusted CA from the store which signed the lowest chain
    certificate, at least if we could not verify the OCSP response without
    doing it
  - Fixed some compiler warnings
- BR: perl(HTTP::Tiny) for test suite
This commit is contained in:
Paul Howarth 2014-05-19 16:50:00 +01:00
parent dc6bbd7cd0
commit c7b175eea3
2 changed files with 16 additions and 2 deletions

View File

@ -1,5 +1,5 @@
Name: perl-Net-SSLeay
Version: 1.61
Version: 1.63
Release: 1%{?dist}
Summary: Perl extension for using OpenSSL
Group: Development/Libraries
@ -23,6 +23,7 @@ BuildRequires: perl(Socket)
BuildRequires: perl(XSLoader)
# =========== Test Suite =============================
BuildRequires: perl(File::Spec)
BuildRequires: perl(HTTP::Tiny)
BuildRequires: perl(IO::Handle)
BuildRequires: perl(Test::Exception)
BuildRequires: perl(Test::More) >= 0.61
@ -87,6 +88,19 @@ rm -rf %{buildroot}
%{_mandir}/man3/Net::SSLeay::Handle.3pm*
%changelog
* Mon May 19 2014 Paul Howarth <paul@city-fan.org> - 1.63-1.0.cf
- Update to 1.63
- Improvements to OCSP support: it turns out that some CAs (like Verisign)
sign the OCSP response with the CA we have in the trust store and don't
attach this certifcate in the response, but OpenSSL by itself only
considers the certificates included in the response and
SSL_OCSP_response_verify added the certificates in the chain too, so now
we also add the trusted CA from the store which signed the lowest chain
certificate, at least if we could not verify the OCSP response without
doing it
- Fixed some compiler warnings
- BR: perl(HTTP::Tiny) for test suite
* Mon May 12 2014 Paul Howarth <paul@city-fan.org> - 1.61-1
- Update to 1.61
- Fixed a typo in an error message

View File

@ -1 +1 @@
95f73786e0a3935232d278f8530b1895 Net-SSLeay-1.61.tar.gz
9b95548e1ed415f8aeed0e004fa68226 Net-SSLeay-1.63.tar.gz