diff --git a/IO-Socket-SSL-1.24.tar.bz2 b/IO-Socket-SSL-1.24.tar.bz2 deleted file mode 100644 index b93df55..0000000 --- a/IO-Socket-SSL-1.24.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a9800a1add2f0cd1c661267f92ff031f50ef6175bc2dae866a04b3a05fd69717 -size 58774 diff --git a/IO-Socket-SSL-1.27.tar.bz2 b/IO-Socket-SSL-1.27.tar.bz2 new file mode 100644 index 0000000..5ce9d76 --- /dev/null +++ b/IO-Socket-SSL-1.27.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:fb15576ed39a69edfc86834ac641a57aa48a0abedf0450d0e50127ab1b424f68 +size 59098 diff --git a/perl-IO-Socket-SSL.changes b/perl-IO-Socket-SSL.changes index 8360fa9..05cf400 100644 --- a/perl-IO-Socket-SSL.changes +++ b/perl-IO-Socket-SSL.changes @@ -1,3 +1,22 @@ +------------------------------------------------------------------- +Mon Aug 3 16:01:26 CEST 2009 - anicka@suse.cz + +- update to 1.27 + * changed possible local/utf-8 depended \w in some regex against more + explicit [a-zA-Z0-9_]. Fixed one regex, where it assumed, that service + names can't have '-' inside + * fixed bug https://rt.cpan.org/Ticket/Display.html?id=48131 + where eli[AT]dvns[DOT]com reported warnings when perl -w was used. + While there made it more aware of errors in Net::ssl_write_all (return + undef not 0 in generic_write) + * SECURITY BUGFIX! + fix Bug in verify_hostname_of_cert where it matched only the prefix for + the hostname when no wildcard was given, e.g. www.example.org matched + against a certificate with name www.exam in it + Thanks to MLEHMANN for reporting + * t/nonblock.t: increase number of bytes written to fix bug with OS X 10.5 + https://rt.cpan.org/Ticket/Display.html?id=47240 + ------------------------------------------------------------------- Mon Apr 6 13:45:00 CEST 2009 - anicka@suse.cz diff --git a/perl-IO-Socket-SSL.spec b/perl-IO-Socket-SSL.spec index a956ffb..7a8c560 100644 --- a/perl-IO-Socket-SSL.spec +++ b/perl-IO-Socket-SSL.spec @@ -1,5 +1,5 @@ # -# spec file for package perl-IO-Socket-SSL (Version 1.24) +# spec file for package perl-IO-Socket-SSL (Version 1.27) # # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -20,7 +20,7 @@ Name: perl-IO-Socket-SSL BuildRequires: perl-Net-SSLeay perl-libwww-perl -Version: 1.24 +Version: 1.27 Release: 1 Provides: p_iossl Obsoletes: p_iossl @@ -28,7 +28,7 @@ Requires: perl-Net-SSLeay perl-libwww-perl Requires: perl = %{perl_version} AutoReqProv: on Group: Development/Libraries/Perl -License: Artistic License +License: Artistic License .. Url: http://cpan.org/modules/by-module/IO Summary: IO::Socket::SSL Perl Module Source: IO-Socket-SSL-%{version}.tar.bz2 @@ -77,188 +77,3 @@ rm -rf $RPM_BUILD_ROOT /var/adm/perl-modules/%{name} %changelog -* Mon Apr 06 2009 anicka@suse.cz -- update to 1.24 - * add verify hostname scheme ftp, same as http - * renew test certificates again (root CA expired, now valid for - 10 years) -* Mon Feb 23 2009 anicka@suse.cz -- update to 1.23 - * if neither SSL_ca_file nor SSL_ca_path are known (e.g not given - and the default values have no existing file|path) disable - checking of certificates, but carp about the problem - * new test certificates, the old ones expired and caused tests - to fail - * Net::SSLeay stores verify callbacks inside hash and never clears - them, so set verify callback to NULL in destroy of context -* Tue Jan 20 2009 anicka@suse.cz -- update to 1.20 - * only changes on test suite to make it ready for win32 - * fix verfycn_name autodetection from PeerAddr/PeerHost - * fixed typo in argument: wildcars_in_cn -> wildcards_in_cn - * no code changes, publish v.16_3 as v.17 because it looks better - than v.16 - * document win32 behavior regarding non-blocking and timeouts - * fix t/nonblock.t with workaround for problems with - IO::Socket::INET on some systems (Mac,5.6.2) where it cannot do - nonblocking connect and leaves socket blocked. - * make some tests less verbose by fixing diag in t/testlib.t - (send output to STDOUT not STDERR and prefix with '#') - * work around Bug in IO::Socket::INET6 on BSD systems - http://rt.cpan.org/Ticket/Display.html?id=39550 - by setting Domain based on PeerAddr - * remove tests of recv/send from t/core.t. Might badly interact - with SSL handshake and cause crashes as seen on OS X 10.4 - * IPv6 is enabled by default if IO::Socket::INET6 is available - * t/inet6.t for basic tests -- remove last patch (fixed in upstream) -* Mon Nov 17 2008 lnussel@suse.de -- fix typo that prevented wildcards in CN (bnc#445678) -* Mon Oct 06 2008 anicka@suse.cz -- update to 1.16 - * change code for SSL_check_crl to use X509_STORE_set_flags - instead of X509_STORE_CTX_set_flags - * change opened() to report -1 if the IO::Handle is open, but the - SSL connection failed, needed with HTTP::Daemon::SSL which will - send an error mssage over the unencrypted socket -* Wed Sep 10 2008 anicka@suse.cz -- update to 1.15 - * change internal behavior when SSL handshake failed (like when - verify callback returned an error) in the hope to fix spurios - errors in t/auto_verify_hostname.t -* Mon Aug 18 2008 ro@suse.de -- hack to build also in buildservice where 127.0.0.1 can - resolve to the hostname instead of localhost -* Mon Aug 04 2008 ro@suse.de -- update require for Net_SSLeay to Net-SSLeay -* Fri Jul 25 2008 anicka@suse.cz -- update to 1.14 - * added support for verification of hostname from certificate - including subjectAltNames, support for IDN etc - * automatic verification of hostnames with SSL_verifycn_scheme and - SSL_verifycn_name - * global setting of default context options like SSL_verifycn_scheme, - SSL_verify_mode with set_ctx_defaults - * fix import of inet4,inet6 which got broken within 1.13_X. - * clarified and enhanced debugging supppport - * put information into README regarding the supported - and recommanded version of Net::SSLeay -* Mon Jan 28 2008 anicka@suse.cz -- update to 1.13 - * removed CLONE_SKIP which was added in 1.03 because this breaks - windows forking. Handled threads/windows forking better by - making sure that CTX from Net::SSLeay gets not freed multiple - times from different threads after cloning/forking - * removed setting LocalPort to 0 in tests, instead leave it undef - if a random port should be allocated. -* Thu Nov 01 2007 anicka@suse.cz -- update to 1.12 - * treat timeouts of 0 for accept_SSL and connect_SSL like - no timeout, like IO::Socket does. - * fixed errors in accept_SSL which would work when called - from start_SSL but not from accept - * start_SSL, accept_SSL and connect_SSL have argument for - Timeout so that the SSL handshake will not block forever. Only - used if the socket is blocking. If not set the Timeout value - from the underlying IO::Socket is used -* Mon Oct 08 2007 anicka@suse.cz -- update to 1.09 - * new method stop_SSL as opposite of start_SSL - * try to make it clearer that thread support is buggy - * make sure that Scalar::Util has support for dualvar - (Makefile.PL,SSL.pm) because the perl*only version has - has no dualvar -* Mon Jun 11 2007 anicka@suse.cz -- update to 1.07 - * fix t/nonblock.t on systems which have by default a larger - socket buffer. Set SO_SNDBUF explicitly with setsockopt - to force smaller writes on the socket -- move testing to %%check -* Tue May 15 2007 anicka@suse.cz -- update to 1.06 - * instead of setting undef args to '' in configure_SSL drop - them. This makes Net::SMTP::SSL working again because it - does not give LocalPort of '' to IO::Socket::INET any more -* Mon Apr 23 2007 anicka@suse.cz -- update to 1.05 - * make session cache working even if the IO::Socket::SSL object - was not created with IO::Socket::SSL->new but with - IO::Socket::SSL->start_SSL on an established socket -* Fri Mar 30 2007 anicka@suse.cz -- update to 1.04 - * added way to create SSL object with predefined session - cache -* Wed Mar 07 2007 anicka@suse.cz -- update to 1.03 - * add CLONE_SKIP -* Wed Dec 13 2006 anicka@suse.cz -- update to 1.02 - * added some info to BUGS and to BUGS section of pod - * added TELL and BINMODE to IO::Socket::SSL::SSL_HANDLE, even - if they do nothing useful. - * all tests allocate now the ports dynamically, so there should - be no longer a conflict with open ports on the system where - the tests run -* Thu Sep 14 2006 anicka@suse.cz -- update to 1.01 - * add support for Diffie Hellman Key Exchange. - * accept_SSL sets errors on $socket (the accepted socket) - not $self (the listening socket if called from accept) - * many bugfixes -* Mon Jul 24 2006 anicka@suse.cz -- update to 0.993 - * added test for sysread/syswrite behavior - * fix Makefile.PL to allow detectection of failures in PREREQ_PM - * fix problems with HTTP::Daemon::SSL -* Tue Jul 18 2006 anicka@suse.cz -- update to 0.99 - * Maintainer changed to - * Better support for nonblocking sockets - * Bugfixes -* Wed Jan 25 2006 mls@suse.de -- converted neededforbuild to BuildRequires -* Mon Aug 01 2005 mjancar@suse.cz -- update to 0.97 -* Wed Sep 29 2004 mls@suse.de -- use X509_STORE_set_flags instead of X509_STORE_CTX_set_flags -* Thu Aug 19 2004 mjancar@suse.cz -- update to 0.96 -* Thu Feb 26 2004 mjancar@suse.cz -- update to 0.95 -* Sun Jan 11 2004 adrian@suse.de -- build as user -* Fri Aug 22 2003 mjancar@suse.cz -- require the perl version we build with -* Thu Jul 24 2003 mjancar@suse.cz -- update 0.94 -* Thu Jul 17 2003 mjancar@suse.cz -- adapt to perl-5.8.1 -- use %%perl_process_packlist -* Mon Jun 16 2003 mjancar@suse.cz -- run make test -- fix filelist -* Tue May 20 2003 mjancar@suse.cz -- remove unpackaged files -* Fri Dec 20 2002 prehak@suse.cz -- updated to 0.92 -- added example directory -* Wed Dec 18 2002 prehak@suse.cz -- updated to version 0.901 -* Thu Jul 11 2002 prehak@suse.cz -- updated to version 0.81 -- added demo, util and more to documetation -* Tue Jul 02 2002 mls@suse.de -- remove race in .packlist generation -* Mon Jan 14 2002 rvasice@suse.cz -- update to version 0.80 -* Fri Aug 24 2001 rvasice@suse.cz -- removed make test - need network -* Tue Aug 14 2001 rvasice@suse.cz -- update to version 0.79 -- add make test -* Tue Mar 13 2001 cihlar@suse.cz -- update to version 0.77 -* Fri Nov 10 2000 cihlar@suse.cz -- renamed p_iossl -> perl-IO-Socket-SSL -* Wed Aug 23 2000 cihlar@suse.cz -- package created