From c7b175eea30a89be1b47c395c2d01a807059be94 Mon Sep 17 00:00:00 2001 From: Paul Howarth Date: Mon, 19 May 2014 16:50:00 +0100 Subject: [PATCH] Update to 1.63 - New upstream release 1.63 - Improvements to OCSP support: it turns out that some CAs (like Verisign) sign the OCSP response with the CA we have in the trust store and don't attach this certifcate in the response, but OpenSSL by itself only considers the certificates included in the response and SSL_OCSP_response_verify added the certificates in the chain too, so now we also add the trusted CA from the store which signed the lowest chain certificate, at least if we could not verify the OCSP response without doing it - Fixed some compiler warnings - BR: perl(HTTP::Tiny) for test suite --- perl-Net-SSLeay.spec | 16 +++++++++++++++- sources | 2 +- 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/perl-Net-SSLeay.spec b/perl-Net-SSLeay.spec index 8c847fc..940fc6d 100644 --- a/perl-Net-SSLeay.spec +++ b/perl-Net-SSLeay.spec @@ -1,5 +1,5 @@ Name: perl-Net-SSLeay -Version: 1.61 +Version: 1.63 Release: 1%{?dist} Summary: Perl extension for using OpenSSL Group: Development/Libraries @@ -23,6 +23,7 @@ BuildRequires: perl(Socket) BuildRequires: perl(XSLoader) # =========== Test Suite ============================= BuildRequires: perl(File::Spec) +BuildRequires: perl(HTTP::Tiny) BuildRequires: perl(IO::Handle) BuildRequires: perl(Test::Exception) BuildRequires: perl(Test::More) >= 0.61 @@ -87,6 +88,19 @@ rm -rf %{buildroot} %{_mandir}/man3/Net::SSLeay::Handle.3pm* %changelog +* Mon May 19 2014 Paul Howarth - 1.63-1.0.cf +- Update to 1.63 + - Improvements to OCSP support: it turns out that some CAs (like Verisign) + sign the OCSP response with the CA we have in the trust store and don't + attach this certifcate in the response, but OpenSSL by itself only + considers the certificates included in the response and + SSL_OCSP_response_verify added the certificates in the chain too, so now + we also add the trusted CA from the store which signed the lowest chain + certificate, at least if we could not verify the OCSP response without + doing it + - Fixed some compiler warnings +- BR: perl(HTTP::Tiny) for test suite + * Mon May 12 2014 Paul Howarth - 1.61-1 - Update to 1.61 - Fixed a typo in an error message diff --git a/sources b/sources index 866a52c..c373168 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -95f73786e0a3935232d278f8530b1895 Net-SSLeay-1.61.tar.gz +9b95548e1ed415f8aeed0e004fa68226 Net-SSLeay-1.63.tar.gz