.fmf/version

@@ -0,0 +1 @@
+1

.gitignore

@@ -1 +1 @@
-SOURCES/Net-SSLeay-1.88.tar.gz
+/Net-SSLeay-[0-9.]*.tar.gz

.perl-Net-SSLeay.metadata

@@ -1 +0,0 @@
-ab4a63502433b91b9a54504475d9df2ae2887714 SOURCES/Net-SSLeay-1.88.tar.gz

Net-SSLeay-1.90-openssl3.0.0-tests-disable_TLS1_and_TLS1_1.patch

@@ -0,0 +1,37 @@
+diff -up Net-SSLeay-1.94/t/local/44_sess.t.orig Net-SSLeay-1.94/t/local/44_sess.t
+--- Net-SSLeay-1.94/t/local/44_sess.t.orig	2024-06-17 15:55:57.760001634 +0200
++++ Net-SSLeay-1.94/t/local/44_sess.t	2024-06-17 15:57:33.333795022 +0200
+@@ -15,13 +15,13 @@ use English qw( $EVAL_ERROR $OSNAME $PER
+ if (not can_fork()) {
+     plan skip_all => "fork() not supported on this system";
+ } else {
+-    plan tests => 67;
++    plan tests => 39;
+ }
+ 
+ initialise_libssl();
+ 
+ my @rounds = qw(
+-    TLSv1 TLSv1.1 TLSv1.2 TLSv1.3 TLSv1.3-num-tickets-ssl
++    TLSv1.2 TLSv1.3 TLSv1.3-num-tickets-ssl
+     TLSv1.3-num-tickets-ctx-6 TLSv1.3-num-tickets-ctx-0
+ );
+ 
+diff -up Net-SSLeay-1.94/t/local/45_exporter.t.orig Net-SSLeay-1.94/t/local/45_exporter.t
+--- Net-SSLeay-1.94/t/local/45_exporter.t.orig	2024-06-17 15:57:56.945991033 +0200
++++ Net-SSLeay-1.94/t/local/45_exporter.t	2024-06-17 16:00:55.358499773 +0200
+@@ -16,12 +16,12 @@ if (not can_fork()) {
+ } elsif (!defined &Net::SSLeay::export_keying_material) {
+     plan skip_all => "No export_keying_material()";
+ } else {
+-    plan tests => 37;
++    plan tests => 19;
+ }
+ 
+ initialise_libssl();
+ 
+-my @rounds = qw( TLSv1 TLSv1.1 TLSv1.2 TLSv1.3 );
++my @rounds = qw( TLSv1.2 TLSv1.3 );
+ 
+ my %usable =
+     map {

Net-SSLeay-1.90-pkgconfig.patch

@@ -0,0 +1,16 @@
+--- Makefile.PL
++++ Makefile.PL
+@@ -209,7 +209,12 @@ EOM
+         @{ $opts->{lib_links} } = map { $_ =~ s/32\b//g } @{ $opts->{lib_links} } if $Config{use64bitall};
+     }
+     else {
+-        push @{ $opts->{lib_links} }, qw( ssl crypto z );
++        if ( eval { require ExtUtils::PkgConfig; ExtUtils::PkgConfig->VERSION('1.16') } && ExtUtils::PkgConfig->exists('openssl') ) {
++            push @{ $opts->{lib_links} }, map { s/^-l//; $_ } split(' ', ExtUtils::PkgConfig->libs_only_l('openssl'));
++        }
++        else {
++             push @{ $opts->{lib_links} }, qw( ssl crypto z );
++        }
+ 
+         if (($Config{cc} =~ /aCC/i) && $^O eq 'hpux') {
+             print "*** Enabling HPUX aCC options (+e)\n";

Net-SSLeay-1.94-openssl3.4.0-tests-fix.patch

@@ -0,0 +1,25 @@
+diff --git a/t/local/32_x509_get_cert_info.t b/t/local/32_x509_get_cert_info.t
+index 0f7e2d5..08316bf 100644
+--- a/t/local/32_x509_get_cert_info.t
++++ b/t/local/32_x509_get_cert_info.t
+@@ -188,6 +188,10 @@ for my $f (keys (%$dump)) {
+                   ) {
+                       $ext_data =~ s{(othername:) [^, ]+}{$1<unsupported>}g;
+                   }
++                  # Starting with 3.4.0 the double colon in emailAddress has been removed.
++                  if (Net::SSLeay::SSLeay >= 0x30400000) {
++                      $ext_data =~ s{emailAddress::}{emailAddress:};
++                  }
+               }
+               elsif ( $nid == 89 ) {
+                   # The output formatting for certificate policies has a
+@@ -214,6 +218,9 @@ for my $f (keys (%$dump)) {
+                       # OpenSSL 1.0.0 to 1.1.1:
+                       $ext_data =~ s{(Full Name:\n  )}{\n$1}g;
+                       $ext_data .= "\n";
++                  } elsif ( Net::SSLeay::SSLeay >  0x3040000f ) {
++                      $ext_data =~ s{(\nFull Name:)}{\n$1}g;
++                      $ext_data .= "\n";
+                   }
+               }
+               elsif ( $nid == 126 ) {

SOURCES/Net-SSLeay-1.88-pkgconfig.patch

@@ -1,45 +0,0 @@
-From 67d9ad2238c6b58ea160df731208cc6f50b64e96 Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= <ppisar@redhat.com>
-Date: Thu, 13 Jun 2019 13:14:26 +0200
-Subject: [PATCH] pkgconfig
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-
-Link to OpenSSL library according to pkgconfig output if available.
-
-Signed-off-by: Petr Písař <ppisar@redhat.com>
----
- Makefile.PL | 16 +++++++++++-----
- 1 file changed, 11 insertions(+), 5 deletions(-)
-
-diff --git a/Makefile.PL b/Makefile.PL
-index 31d9c74..6d7ceba 100644
---- a/Makefile.PL
-+++ b/Makefile.PL
-@@ -200,11 +200,17 @@ EOM
-         @{ $opts->{lib_links} } = map { $_ =~ s/32\b//g } @{ $opts->{lib_links} } if $Config{use64bitall};
-     }
-     else {
--        push @{ $opts->{lib_links} },
--             ($rsaref
--              ? qw( ssl crypto RSAglue rsaref z )
--              : qw( ssl crypto z )
--             );
-+        my $libsflags = `pkg-config --libs-only-l openssl`;
-+        if ( $libsflags ne '' ) {
-+            push @{ $opts->{lib_links} }, map { s/^-l//; $_ } split(' ', $libsflags);
-+        }
-+        else {
-+            push @{ $opts->{lib_links} },
-+                 ($rsaref
-+                  ? qw( ssl crypto RSAglue rsaref z )
-+                  : qw( ssl crypto z )
-+                 );
-+        }
- 
-         if (($Config{cc} =~ /aCC/i) && $^O eq 'hpux') {
-             print "*** Enabling HPUX aCC options (+e)\n";
--- 
-2.20.1
-

gating.yaml

@@ -0,0 +1,6 @@
+--- !Policy
+product_versions:
+  - rhel-9
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}

perl-Net-SSLeay.rpmlintrc

@@ -0,0 +1,4 @@
+from Config import *
+addFilter("spelling-error %description -l en_US http -> ");
+addFilter("spelling-error %description -l en_US sslcat -> ");
+addFilter("crypto-policy-non-compliance-openssl /usr/lib64/perl5/vendor_perl/auto/Net/SSLeay/SSLeay.so SSL_CTX_set_cipher_list");

perl-Net-SSLeay.spec

@@ -4,18 +4,16 @@
 %{bcond_with perl_Net_SSLeay_enables_optional_test}
 %endif
 
-# Provides/Requires filtering is different from rpm 4.9 onwards
-%global rpm49 %(rpm --version | perl -p -e 's/^.* (\\d+)\\.(\\d+).*/sprintf("%d.%03d",$1,$2) ge 4.009 ? 1 : 0/e' 2>/dev/null || echo 0)
-
 Name:		perl-Net-SSLeay
-Version:	1.88
-Release:	2%{?dist}
+Version:	1.94
+Release:	3%{?dist}
 Summary:	Perl extension for using OpenSSL
-License:	Artistic 2.0
+License:	Artistic-2.0
 URL:		https://metacpan.org/release/Net-SSLeay
 Source0:	https://cpan.metacpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz
-# To prevent from linking to zlib
-Patch1:		Net-SSLeay-1.88-pkgconfig.patch
+Patch1:		Net-SSLeay-1.90-pkgconfig.patch
+Patch2:		Net-SSLeay-1.90-openssl3.0.0-tests-disable_TLS1_and_TLS1_1.patch
+Patch3:		Net-SSLeay-1.94-openssl3.4.0-tests-fix.patch
 # =========== Module Build ===========================
 BuildRequires:	coreutils
 BuildRequires:	findutils
@@ -26,43 +24,52 @@ BuildRequires:	openssl-devel
 BuildRequires:	perl-devel
 BuildRequires:	perl-generators
 BuildRequires:	perl-interpreter
-BuildRequires:	perl(Cwd)
-BuildRequires:	perl(ExtUtils::MakeMaker)
+BuildRequires:	perl(constant)
+BuildRequires:	perl(English)
+BuildRequires:	perl(ExtUtils::MakeMaker) >= 6.76
+BuildRequires:	perl(ExtUtils::PkgConfig)
 BuildRequires:	perl(ExtUtils::MM)
 BuildRequires:	perl(File::Basename)
 BuildRequires:	perl(File::Path)
+BuildRequires:	perl(File::Spec::Functions)
 BuildRequires:	perl(Symbol)
-BuildRequires:	pkgconf-pkg-config
+BuildRequires:	perl(Text::Wrap)
+BuildRequires:	perl(utf8)
 # =========== Module Runtime =========================
 BuildRequires:	perl(AutoLoader)
 BuildRequires:	perl(Carp)
+BuildRequires:	perl(Errno)
 BuildRequires:	perl(Exporter)
 BuildRequires:	perl(MIME::Base64)
 BuildRequires:	perl(Socket)
+BuildRequires:	perl(vars)
 BuildRequires:	perl(XSLoader)
 # =========== Test Suite =============================
+BuildRequires:	perl(base)
 BuildRequires:	perl(Config)
+BuildRequires:	perl(Cwd)
 BuildRequires:	perl(File::Spec)
 BuildRequires:	perl(FindBin)
 BuildRequires:	perl(HTTP::Tiny)
 BuildRequires:	perl(IO::Handle)
 BuildRequires:	perl(IO::Socket::INET)
 BuildRequires:	perl(lib)
+BuildRequires:	perl(Scalar::Util)
+BuildRequires:	perl(SelectSaver)
 BuildRequires:	perl(Storable)
 BuildRequires:	perl(strict)
+BuildRequires:	perl(Test::Builder)
 BuildRequires:	perl(Test::More) >= 0.61
 BuildRequires:	perl(threads)
 BuildRequires:	perl(warnings)
-# =========== Optional Test Suite ====================
+# =========== Optional Tests =========================
 %if %{with perl_Net_SSLeay_enables_optional_test}
-BuildRequires:	perl(Test::Exception)
+BuildRequires:	perl(Crypt::OpenSSL::Bignum)
 # Test::Kwalitee 1.00 not used
-BuildRequires:	perl(Test::NoWarnings)
-BuildRequires:	perl(Test::Pod) >= 1.0
+BuildRequires:	perl(Test::Pod) >= 1.41
 # Test::Pod::Coverage 1.00 not used
-BuildRequires:	perl(Test::Warn)
 %endif
-# =========== Module Runtime =========================
+# =========== Module Dependencies ====================
 Requires:	perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version))
 Requires:	perl(MIME::Base64)
 Requires:	perl(XSLoader)
@@ -70,6 +77,11 @@ Requires:	perl(XSLoader)
 # Don't "provide" private Perl libs or the redundant unversioned perl(Net::SSLeay) provide
 %global __provides_exclude ^(perl\\(Net::SSLeay\\)$|SSLeay\\.so)
 
+# Filter modules bundled for tests
+%global __provides_exclude_from %{?__provides_exclude_from:%__provides_exclude_from|}^%{_libexecdir}
+%global __requires_exclude %{?__requires_exclude:%__requires_exclude|}^perl\\(Test::Net::SSLeay.*\\)
+%global __requires_exclude %{__requires_exclude}|^perl\\(Net::PcapWriter\\)
+
 %description
 This module offers some high level convenience functions for accessing
 web pages on SSL servers (for symmetry, same API is offered for
@@ -77,48 +89,75 @@ accessing http servers, too), a sslcat() function for writing your own
 clients, and finally access to the SSL API of SSLeay/OpenSSL package
 so you can write servers or clients for more complicated applications.
 
+%package tests
+Summary:        Tests for %{name}
+Requires:       %{name} = %{?epoch:%{epoch}:}%{version}-%{release}
+Requires:       perl-Test-Harness
+
+%description tests
+Tests from %{name}. Execute them
+with "%{_libexecdir}/%{name}/test".
+
 %prep
 %setup -q -n Net-SSLeay-%{version}
 
 # Get libraries to link against from pkg-config
 # https://github.com/radiator-software/p5-net-ssleay/pull/127
-%patch1 -p1
+%patch -P1
+
+# Disable TLS1 and TLS1_1 from tests
+%patch -P2 -p1
+
+# Fix test suite to work with OpenSSL 3.4.0 and newer
+# https://github.com/radiator-software/p5-net-ssleay/pull/520
+%patch -P3 -p1
 
 # Fix permissions in examples to avoid bogus doc-file dependencies
 chmod -c 644 examples/*
 
-# Remove redundant unversioned provide if we don't have rpm 4.9 or later
-%if ! %{rpm49}
-%global provfilt /bin/sh -c "%{__perl_provides} | grep -Fvx 'perl(Net::SSLeay)'"
-%global __perl_provides %{provfilt}
-%endif
+# Help generators to recognize Perl scripts
+for F in `find t -name *.t -o -name *.pl`; do
+    perl -i -MConfig -ple 'print $Config{startperl} if $. == 1 && !s{\A#!.*perl\b}{$Config{startperl}}' "$F"
+    chmod +x "$F"
+done
 
 %build
 unset OPENSSL_PREFIX
 PERL_MM_USE_DEFAULT=1 perl Makefile.PL \
 	INSTALLDIRS=vendor \
-	OPTIMIZE="%{optflags}" </dev/null
-make %{?_smp_mflags}
+	NO_PACKLIST=1 \
+	NO_PERLLOCAL=1 \
+	OPTIMIZE="%{optflags}" < /dev/null
+%{make_build}
 
 %install
-make pure_install DESTDIR=%{buildroot}
-find %{buildroot} -type f -name .packlist -delete
+%{make_install}
 find %{buildroot} -type f -name '*.bs' -empty -delete
 %{_fixperms} -c %{buildroot}
 
 # Remove script we don't want packaged
 rm -f %{buildroot}%{perl_vendorarch}/Net/ptrtstrun.pl
 
+# Install tests
+mkdir -p %{buildroot}%{_libexecdir}/%{name}
+cp -a t inc %{buildroot}%{_libexecdir}/%{name}
+rm %{buildroot}%{_libexecdir}/%{name}/t/external/ocsp.t
+rm %{buildroot}%{_libexecdir}/%{name}/t/local/kwalitee.t
+rm %{buildroot}%{_libexecdir}/%{name}/t/local/02_pod_coverage.t
+
+cat > %{buildroot}%{_libexecdir}/%{name}/test << 'EOF'
+#!/bin/sh
+unset RELEASE_TESTING
+cd %{_libexecdir}/%{name} && exec prove -I . -r -j "$(getconf _NPROCESSORS_ONLN)"
+EOF
+chmod +x %{buildroot}%{_libexecdir}/%{name}/test
+
 %check
 unset RELEASE_TESTING
-make test
+OPENSSL_ENABLE_SHA1_SIGNATURES=1 make test
 
 %files
-%if 0%{?_licensedir:1}
 %license LICENSE
-%else
-%doc LICENSE
-%endif
 %doc Changes CONTRIBUTING.md Credits QuickRef README examples/
 %{perl_vendorarch}/auto/Net/
 %dir %{perl_vendorarch}/Net/
@@ -128,35 +167,183 @@ make test
 %{_mandir}/man3/Net::SSLeay.3*
 %{_mandir}/man3/Net::SSLeay::Handle.3*
 
+%files tests
+%{_libexecdir}/%{name}
+
 %changelog
-* Mon Nov 22 2021 Jitka Plesnikova <jplesnik@redhat.com> - 1.88-2
+* Mon May 26 2025 Jitka Plesnikova <jplesnik@redhat.com> - 1.94-3
+- Resolves: RHEL-92846 - Fix typo in macro
+
+* Thu May 22 2025 Jitka Plesnikova <jplesnik@redhat.com> - 1.94-2
+- Fix test suite to work with OpenSSL 3.4.0 and newer
+  Resolves: RHEL-92846
+
+* Mon Jun 17 2024 Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
+- Resolves: RHEL-40758
+- Update to 1.94
+  - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
+    3.2, and LibreSSL 3.5-3.8
+  - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
+    compile, it should now be much easier to identify the cause
+  - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
+    function are now exposed, enabling fine-grained control over the
+    initialisation and configuration of both libraries
+  - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
+    in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
+    and SSL_CTX_set_psk_use_session_callback() (on the client side)
+  - libssl functions implementing server-side TLS 1.2 PSK authentication are
+    now exposed, in particular SSL_CTX_set_psk_server_callback()
+  - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
+    TLS server to set a callback function that is executed when the server
+    processes a ClientHello message
+  - Many more libcrypto/libssl constants and functions are now exposed; see the
+    release notes for the 1.93 developer releases for a full list
+- Package tests
+
+* Wed Jul 27 2022 Jitka Plesnikova <jplesnik@redhat.com> - 1.92-2
+- Enable using SHA1 for tests
+- Resolves: rhbz#2107670
+
+* Wed Jan 26 2022 Michal Josef Špaček <mspacek@redhat.com> - 1.92-1
+- Update to 1.92
+
+* Wed Aug 11 2021 Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
+- Fix tests for openssl 3.0.0-beta2. rhbz#1992571
+  - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
+- Remove XXX in spec file
+
+* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.90-7
+- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
+  Related: rhbz#1991688
+
+* Fri Jul 23 2021 Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
+- Fix tests for openssl 3.0.0-beta1. rhbz#1964854
+  - Add fix for t/05_passwd_cb.t
+  - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
+- Fix tab vs space in spec file
+- Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version
+
+* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.90-5
+- Rebuilt for RHEL 9 BETA for openssl 3.0
+  Related: rhbz#1971065
+
+* Fri Jun 04 2021 Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
+- Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
+  - Fix check across alpha1 vs alpha17
+  - Change default alg for PEM_get_string_PrivateKey()
+  - Different order in CA chain in some versions
+  - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
+    unknown ciphers
+  - Disable TLSv1 and TLSv1_1 usage in test
+
+* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.90-3
+- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
+
+* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.90-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
+
+* Thu Jan 21 2021 Paul Howarth <paul@city-fan.org> - 1.90-1
+- Update to 1.90
+  - Formalised libssl version support policy: all stable versions of OpenSSL
+    in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
+    stable releases of LibreSSL in the 2.0-3.1 series are supported
+  - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
+    implementation is not currently libssl-compatible
+  - Added support for LibreSSL on Windows when built with Visual C++
+  - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
+    several stack functions
+  - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
+    CTX_set_alpn_select_cb
+  - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
+    OpenSSL security level 2 (the default on many Linux distributions)
+
+* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.88-9
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+
+* Tue Jun 23 2020 Jitka Plesnikova <jplesnik@redhat.com> - 1.88-8
+- Perl 5.32 rebuild
+
+* Sat Mar 21 2020 Paul Howarth <paul@city-fan.org> - 1.88-7
+- Add SSL_shutdown() calls in Net::SSLeay::sslcat() and t/local/07_sslecho.t
+  to fix compatibility with OpenSSL 1.1.1e (GH#160, GH#161)
+
+* Tue Mar 10 2020 Paul Howarth <paul@city-fan.org> - 1.88-6
 - BR: perl(FindBin) for test suite
 
-* Thu Jun 13 2019 Petr Pisar <ppisar@redhat.com>- 1.88-1
-- Update to 1.88 (bug #1632597, bug #1633630)
+* Wed Feb 05 2020 Tom Stellard <tstellar@redhat.com> - 1.88-5
+- Spec file cleanups: Use make_build and make_install macros
+- https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
+- https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
 
-* Sat Sep 29 2018 Paul Howarth <paul@city-fan.org> - 1.85-6
+* Thu Jan 30 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.88-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
+
+* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.88-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
+
+* Fri May 31 2019 Jitka Plesnikova <jplesnik@redhat.com> - 1.88-2
+- Perl 5.30 rebuild
+
+* Sat May 11 2019 Paul Howarth <paul@city-fan.org> - 1.88-1
+- Update to 1.88
+  Summary of major changes since version 1.85
+  - Mike McCauley has stepped down as maintainer: the new maintainers are Chris
+    Novakovic, Heikki Vatiainen and Tuure Vartiainen
+  - The source code has moved from the now-defunct Debian Subversion server
+    (alioth.debian.org) to GitHub
+    (https://github.com/radiator-software/p5-net-ssleay)
+  - Net-SSLeay is provided under the terms of the Artistic License 2.0; this
+    has been the case since version 1.66, but references to other licenses
+    remained in the source code, causing ambiguity
+  - Perl 5.8.1 or newer is now required to use Net-SSLeay; this has already
+    been the case for some time in practice, as the test suite hasn't fully
+    passed on Perl 5.6 for several years
+  - Much-improved compatibility with OpenSSL 1.1.1, and improved support for
+    TLS 1.3
+  - Fixed a long-standing bug in cb_data_advanced_put() that caused memory
+    leaks when callbacks were frequently added and removed
+  - Support in the test suite for "hardened" OpenSSL configurations that set a
+    default security level of 2 or higher (e.g., in the OpenSSL packages that
+    ship with recent versions of Debian, Fedora and Ubuntu)
+
+* Thu Apr 18 2019 Petr Pisar <ppisar@redhat.com> - 1.86-0.3.09
+- Replace expired test certificates (CPAN RT#129201)
+
+* Fri Mar 29 2019 Paul Howarth <paul@city-fan.org> - 1.86-0.2.09
+- Get libraries to link against from pkg-config
+  https://github.com/radiator-software/p5-net-ssleay/pull/127
+
+* Wed Mar 20 2019 Petr Pisar <ppisar@redhat.com> - 1.86-0.1.09
+- Update to 1.86_09 (see Changes file for details)
+
+* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.85-10
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
+
+* Sat Sep 29 2018 Paul Howarth <paul@city-fan.org> - 1.85-9
 - OpenSSL 1.1.1 in Fedora disables SSL3 API, so stop trying to test it
-  (bug #1610376)
 
-* Wed Aug 15 2018 Petr Pisar <ppisar@redhat.com> - 1.85-5
-- Revert retry in Net::SSLeay::{read,write}() (bug #1610376)
-- Revert retry in Net::SSLeay::write_partial() (bug #1610376)
+* Wed Sep 19 2018 Paul Howarth <paul@city-fan.org> - 1.85-8
+- Expose SSL_CTX_set_post_handshake_auth (#1630391)
+  https://github.com/radiator-software/p5-net-ssleay/pull/68
 
-* Tue Aug 14 2018 Petr Pisar <ppisar@redhat.com> - 1.85-4
-- Avoid SIGPIPE in t/local/36_verify.t (bug #1610376)
+* Fri Aug 17 2018 Petr Pisar <ppisar@redhat.com> - 1.85-7
+- Revert retry in Net::SSLeay::write_partial() (bug #1614884)
 
-* Mon Aug 13 2018 Petr Pisar <ppisar@redhat.com> - 1.85-3
-- Adapt to OpenSSL 1.1.1 (bug #1610376)
-- Adapt tests to system-wide crypto policy (bug #1610376)
-- Adapt tests to security level 2 system-wide crypt policy (bug #1610376)
+* Wed Aug 15 2018 Petr Pisar <ppisar@redhat.com> - 1.85-6
+- Revert retry in Net::SSLeay::{read,write}() (bug #1614884)
 
-* Mon Aug 13 2018 Jitka Plesnikova <jplesnik@redhat.com> - 1.85-2
-- Add missing call to va_end() in TRACE() (bug #1607018)
+* Tue Aug 14 2018 Petr Pisar <ppisar@redhat.com> - 1.85-5
+- Avoid SIGPIPE in t/local/36_verify.t (bug #1614884)
 
-* Sat Aug 11 2018 Troy Dawson <tdawson@redhat.com>
-- Disable %%check so package will build for Mass Rebuild
-- Related: bug#1614611
+* Mon Aug 13 2018 Petr Pisar <ppisar@redhat.com> - 1.85-4
+- Adapt to OpenSSL 1.1.1 (bug #1614884)
+- Adapt tests to system-wide crypto policy (bug #1614884)
+
+* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.85-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
+* Thu Jun 28 2018 Jitka Plesnikova <jplesnik@redhat.com> - 1.85-2
+- Perl 5.28 rebuild
 
 * Wed Mar 14 2018 Paul Howarth <paul@city-fan.org> - 1.85-1
 - Update to 1.85

plans/internal.fmf

@@ -0,0 +1,12 @@
+summary: Private (RHEL) beakerlib tests
+enabled: false
+adjust:
+  - when: distro == rhel
+    enabled: true
+    because: private tests are accesible only within rhel pipline
+discover:
+  - name: rhel
+    how: fmf
+    url: https://pkgs.devel.redhat.com/git/tests/perl-Net-SSLeay
+execute:
+    how: tmt

plans/sanity.fmf

@@ -0,0 +1,5 @@
+summary: Sanity tests
+discover:
+    how: fmf
+execute:
+    how: tmt

sources

@@ -0,0 +1 @@
+SHA512 (Net-SSLeay-1.94.tar.gz) = f1461667269f3da56ff7e1724b5511b95c34582250f8336e9f93d30f3b30d4a5360eb27622b9730bba11df75e00d717c7f0cea2120d20206723db136a8509375

tests/upstream-tests.fmf

@@ -0,0 +1,12 @@
+summary: Upstream tests
+contact: Jitka Plesnikova <jplesnik@redhat.com>
+component: perl-Net-SSLeay
+require: perl-Net-SSLeay-tests
+test: /usr/libexec/perl-Net-SSLeay/test
+enabled: true
+tag:
+  - rhel-buildroot
+adjust:
+  - enabled: false
+    when: distro < rhel-9 or distro < centos-stream-9
+    continue: false