Compare commits
10 Commits
Author | SHA256 | Date | |
---|---|---|---|
5d82db353f | |||
3a84ab3e81 | |||
c10233911a | |||
2fdd27b5b3 | |||
0fe25259e3 | |||
e7e1030a39 | |||
938f1e724f | |||
41a6569b63 | |||
babf85774f | |||
5b329f119d |
@@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:95b2f7c0628a7e246a159665fbf0620d0d7835e3a940f22d3fdd47c3aa799c2e
|
||||
size 265644
|
3
IO-Socket-SSL-2.095.tar.gz
Normal file
3
IO-Socket-SSL-2.095.tar.gz
Normal file
@@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:7e764392b1b8bd44e654183c082b75be47800e98d7cd325f0e1b76c7d9a6b768
|
||||
size 276128
|
12
README.md
Normal file
12
README.md
Normal file
@@ -0,0 +1,12 @@
|
||||
|
||||
## Build Results
|
||||
|
||||
Current state of perl in openSUSE:Factory is
|
||||
|
||||

|
||||
|
||||
The current state of perl in the devel project build (devel:languages:perl)
|
||||
|
||||

|
||||
|
||||
|
@@ -1,5 +1,4 @@
|
||||
patches:
|
||||
perl-IO-Socket-SSL-use-system-default-cipher-list.patch: -p1 PATCH-FIX-UPSTREAM (bsc1200295) perl-IO-Socket-SSL doesn't follow system "PROFILE=SYSTEM" openSSL ciphers - https://git.centos.org/rpms/perl-IO-Socket-SSL/blob/e0b0ae04f5cdb41b1f29cb7d76c23abba7ac35e9/f/SOURCES/IO-Socket-SSL-2.066-use-system-default-cipher-list.patch
|
||||
#patches:
|
||||
ignore_requires: Mozilla::CA
|
||||
prep: |-
|
||||
rm README.Win32
|
||||
|
@@ -1,34 +0,0 @@
|
||||
Index: IO-Socket-SSL-2.074/lib/IO/Socket/SSL.pm
|
||||
===================================================================
|
||||
--- IO-Socket-SSL-2.074.orig/lib/IO/Socket/SSL.pm
|
||||
+++ IO-Socket-SSL-2.074/lib/IO/Socket/SSL.pm
|
||||
@@ -205,8 +205,10 @@ my %DEFAULT_SSL_ARGS = (
|
||||
SSL_npn_protocols => undef, # meaning depends whether on server or client side
|
||||
SSL_alpn_protocols => undef, # list of protocols we'll accept/send, for example ['http/1.1','spdy/3.1']
|
||||
|
||||
- # rely on system default but be sure to disable some definitely bad ones
|
||||
- SSL_cipher_list => 'DEFAULT !EXP !MEDIUM !LOW !eNULL !aNULL !RC4 !DES !MD5 !PSK !SRP',
|
||||
+ # Use system-wide default cipher list to support use of system-wide
|
||||
+ # crypto policy (#1076390, #1127577, CPAN RT#97816)
|
||||
+ # https://fedoraproject.org/wiki/Changes/CryptoPolicy
|
||||
+ SSL_cipher_list => 'PROFILE=SYSTEM',
|
||||
);
|
||||
|
||||
my %DEFAULT_SSL_CLIENT_ARGS = (
|
||||
Index: IO-Socket-SSL-2.074/lib/IO/Socket/SSL.pod
|
||||
===================================================================
|
||||
--- IO-Socket-SSL-2.074.orig/lib/IO/Socket/SSL.pod
|
||||
+++ IO-Socket-SSL-2.074/lib/IO/Socket/SSL.pod
|
||||
@@ -1070,9 +1070,8 @@ ciphers for TLS 1.2 and lower. See the O
|
||||
for more details.
|
||||
|
||||
Unless you fail to contact your peer because of no shared ciphers it is
|
||||
-recommended to leave this option at the default setting, which uses the system
|
||||
-default but disables some insecure ciphers which might still be enabled on older
|
||||
-systems.
|
||||
+recommended to leave this option at the default setting, which honors the
|
||||
+system-wide PROFILE=SYSTEM cipher list.
|
||||
|
||||
In case different cipher lists are needed for different SNI hosts a hash can be
|
||||
given with the host as key and the cipher suite as value, similar to
|
||||
|
@@ -1,3 +1,98 @@
|
||||
-------------------------------------------------------------------
|
||||
Fri Jul 11 05:38:00 UTC 2025 - Tina Müller <timueller+perl@suse.de>
|
||||
|
||||
- updated to 2.95.0 (2.095)
|
||||
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
|
||||
|
||||
2.095 2025/07/10
|
||||
- regression: make sysread set buffer to empty string again when returning
|
||||
EOf. Fixes #171
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jun 19 05:33:58 UTC 2025 - Tina Müller <timueller+perl@suse.de>
|
||||
|
||||
- updated to 2.94.0 (2.094)
|
||||
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
|
||||
|
||||
2.094 2025/06/18
|
||||
- fixed memory leak introduced in 2.092
|
||||
2.093 2025/06/17
|
||||
- Another rework for one-sided SSL shutdown, to a) implement a useful and secure
|
||||
behavior and b) without affecting existing applications. 2.092 had still
|
||||
unwanted side effects
|
||||
2.092 2025/06/16
|
||||
- rework implementation and behavior for one-sided SSL shutdown. Implementation
|
||||
in 2.091 lead to some problems with Net::FTP and others.
|
||||
2.091 2025/06/11
|
||||
- fix behavior on one-sided SSL shutdown. If the application continued
|
||||
to read after half-closing the SSL connection this could result in reading
|
||||
encrypted data (i.e. close notify, SSL session tickets ...).
|
||||
See documentation of stop_SSL for detailed description of handling
|
||||
half-closed SSL connections.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jun 3 05:35:44 UTC 2025 - Tina Müller <timueller+perl@suse.de>
|
||||
|
||||
- updated to 2.90.0 (2.090)
|
||||
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
|
||||
|
||||
2.090 2025/06/03
|
||||
- fix OCSP live test after Let's Encrypt has disabled OCSP support #169
|
||||
- public_suffix now preserves trailing dot #167
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Aug 31 05:33:49 UTC 2024 - Tina Müller <timueller+perl@suse.de>
|
||||
|
||||
- updated to 2.89.0 (2.089)
|
||||
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
|
||||
|
||||
2.089 2024/08/29
|
||||
- new option SSL_force_fingerprint to enforce fingerprint matching even if
|
||||
certificate validation would be successful without
|
||||
- document _get_ssl_object and _get_ctx_object for cases, where direct use of
|
||||
Net::SSLeay functions is needed
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sun Jul 14 16:02:28 UTC 2024 - Tina Müller <tina.mueller@suse.com>
|
||||
|
||||
- Remove patches 80315ed1a6a0b7968ce26284ed81b56c0ab288d9.patch,
|
||||
perl-IO-Socket-SSL-use-system-default-cipher-list.patch (fixed upstream)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sun Jul 14 05:31:32 UTC 2024 - Tina Müller <timueller+perl@suse.de>
|
||||
|
||||
- updated to 2.88.0 (2.088)
|
||||
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
|
||||
|
||||
2.088 2024/07/14
|
||||
- minor fixes for use on ancient versions of perl and for building with
|
||||
newer versions of openssl
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jul 11 14:38:31 UTC 2024 - Dirk Stoecker <opensuse@dstoecker.de>
|
||||
|
||||
- add 80315ed1a6a0b7968ce26284ed81b56c0ab288d9.patch to fix a error
|
||||
introduced in version 2.087
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jul 9 05:30:33 UTC 2024 - Tina Müller <timueller+perl@suse.de>
|
||||
|
||||
- updated to 2.87.0 (2.087)
|
||||
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
|
||||
|
||||
2.087 2024/07/08
|
||||
- support for PSK, see SSL_psk in documentation
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jul 3 16:49:59 UTC 2024 - Tina Müller <tina.mueller@suse.com>
|
||||
|
||||
- updated to 2.86.0 (2.086)
|
||||
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
|
||||
|
||||
2.086 2024/07/03
|
||||
- internal optimzation: implement _touch_entry in session cache instead
|
||||
of using del+add.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Mar 22 19:12:44 UTC 2024 - Tina Müller <tina.mueller@suse.com>
|
||||
|
||||
|
@@ -1,7 +1,7 @@
|
||||
#
|
||||
# spec file for package perl-IO-Socket-SSL
|
||||
#
|
||||
# Copyright (c) 2024 SUSE LLC
|
||||
# Copyright (c) 2025 SUSE LLC
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
@@ -18,26 +18,25 @@
|
||||
|
||||
%define cpan_name IO-Socket-SSL
|
||||
Name: perl-IO-Socket-SSL
|
||||
Version: 2.85.0
|
||||
Version: 2.95.0
|
||||
Release: 0
|
||||
# 2.085 -> normalize -> 2.85.0
|
||||
%define cpan_version 2.085
|
||||
# 2.095 -> normalize -> 2.95.0
|
||||
%define cpan_version 2.095
|
||||
License: Artistic-1.0 OR GPL-1.0-or-later
|
||||
Summary: Nearly transparent SSL encapsulation for IO::Socket::INET
|
||||
URL: https://metacpan.org/release/%{cpan_name}
|
||||
Source0: https://cpan.metacpan.org/authors/id/S/SU/SULLR/%{cpan_name}-%{cpan_version}.tar.gz
|
||||
Source1: cpanspec.yml
|
||||
# PATCH-FIX-UPSTREAM (bsc1200295) perl-IO-Socket-SSL doesn't follow system "PROFILE=SYSTEM" openSSL ciphers - https://git.centos.org/rpms/perl-IO-Socket-SSL/blob/e0b0ae04f5cdb41b1f29cb7d76c23abba7ac35e9/f/SOURCES/IO-Socket-SSL-2.066-use-system-default-cipher-list.patch
|
||||
Patch0: perl-IO-Socket-SSL-use-system-default-cipher-list.patch
|
||||
Source100: README.md
|
||||
BuildArch: noarch
|
||||
BuildRequires: perl
|
||||
BuildRequires: perl-macros
|
||||
#BuildRequires: perl(Mozilla::CA)
|
||||
BuildRequires: perl(Net::SSLeay) >= 1.46
|
||||
BuildRequires: perl(Net::SSLeay) >= 1.460
|
||||
#Requires: perl(Mozilla::CA)
|
||||
Requires: perl(Net::SSLeay) >= 1.46
|
||||
Requires: perl(Net::SSLeay) >= 1.460
|
||||
Provides: perl(IO::Socket::SSL) = %{version}
|
||||
Provides: perl(IO::Socket::SSL::Intercept) = 2.056
|
||||
Provides: perl(IO::Socket::SSL::Intercept) = 2.56.0
|
||||
Provides: perl(IO::Socket::SSL::OCSP_Cache)
|
||||
Provides: perl(IO::Socket::SSL::OCSP_Resolver)
|
||||
Provides: perl(IO::Socket::SSL::PublicSuffix)
|
||||
@@ -45,7 +44,7 @@ Provides: perl(IO::Socket::SSL::SSL_Context)
|
||||
Provides: perl(IO::Socket::SSL::SSL_HANDLE)
|
||||
Provides: perl(IO::Socket::SSL::Session_Cache)
|
||||
Provides: perl(IO::Socket::SSL::Trace)
|
||||
Provides: perl(IO::Socket::SSL::Utils) = 2.015
|
||||
Provides: perl(IO::Socket::SSL::Utils) = 2.15.0
|
||||
%undefine __perllib_provides
|
||||
%{perl_requires}
|
||||
|
||||
@@ -89,7 +88,7 @@ Additional documentation can be found in
|
||||
* * IO::Socket::SSL::Utils - Useful functions for certificates etc
|
||||
|
||||
%prep
|
||||
%autosetup -n %{cpan_name}-%{cpan_version} -p1
|
||||
%autosetup -n %{cpan_name}-%{cpan_version} -p1
|
||||
|
||||
find . -type f ! -path "*/t/*" ! -name "*.pl" ! -path "*/bin/*" ! -path "*/script/*" ! -path "*/scripts/*" ! -name "configure" -print0 | xargs -0 chmod 644
|
||||
|
||||
@@ -106,6 +105,6 @@ make test
|
||||
%perl_gen_filelist
|
||||
|
||||
%files -f %{name}.files
|
||||
%doc BUGS Changes docs example README README.Win32
|
||||
%doc BUGS Changes docs example README
|
||||
|
||||
%changelog
|
||||
|
Reference in New Issue
Block a user