8
0

10 Commits

Author SHA256 Message Date
5d82db353f Add Gitea build results 2025-08-12 18:14:50 +02:00
3a84ab3e81 Accepting request 1291908 from devel:languages:perl:autoupdate
- updated to 2.95.0 (2.095)
   see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
  2.095 2025/07/10
  - regression: make sysread set buffer to empty string again when returning
    EOf. Fixes #171

OBS-URL: https://build.opensuse.org/request/show/1291908
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-IO-Socket-SSL?expand=0&rev=164
2025-07-11 10:20:20 +00:00
c10233911a Accepting request 1288032 from devel:languages:perl:autoupdate
- updated to 2.94.0 (2.094)
   see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
  2.094 2025/06/18
  - fixed memory leak introduced in 2.092
  2.093 2025/06/17
  - Another rework for one-sided SSL shutdown, to a) implement a useful and secure
    behavior and b) without affecting existing applications. 2.092 had still
    unwanted side effects
  2.092 2025/06/16
  - rework implementation and behavior for one-sided SSL shutdown. Implementation
    in 2.091 lead to some problems with Net::FTP and others.
  2.091 2025/06/11
  - fix behavior on one-sided SSL shutdown. If the application continued
    to read after half-closing the SSL connection this could result in reading
    encrypted data (i.e. close notify, SSL session tickets ...).
    See documentation of stop_SSL for detailed description of handling
    half-closed SSL connections.

OBS-URL: https://build.opensuse.org/request/show/1288032
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-IO-Socket-SSL?expand=0&rev=163
2025-06-24 07:16:45 +00:00
2fdd27b5b3 Accepting request 1282201 from devel:languages:perl:autoupdate
- updated to 2.90.0 (2.090)
   see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
  2.090 2025/06/03
  - fix OCSP live test after Let's Encrypt has disabled OCSP support #169
  - public_suffix now preserves trailing dot #167

OBS-URL: https://build.opensuse.org/request/show/1282201
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-IO-Socket-SSL?expand=0&rev=161
2025-06-03 09:21:48 +00:00
0fe25259e3 Accepting request 1203067 from devel:languages:perl:autoupdate
- updated to 2.89.0 (2.089)
   see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
  2.089 2024/08/29
  - new option SSL_force_fingerprint to enforce fingerprint matching even if
    certificate validation would be successful without
  - document _get_ssl_object and _get_ctx_object for cases, where direct use of
    Net::SSLeay functions is needed

OBS-URL: https://build.opensuse.org/request/show/1203067
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-IO-Socket-SSL?expand=0&rev=159
2024-09-26 16:24:05 +00:00
e7e1030a39 Accepting request 1187397 from devel:languages:perl:autoupdate
- Remove patches 80315ed1a6a0b7968ce26284ed81b56c0ab288d9.patch,
  perl-IO-Socket-SSL-use-system-default-cipher-list.patch (fixed upstream)
- updated to 2.88.0 (2.088)
   see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
  2.088 2024/07/14
  - minor fixes for use on ancient versions of perl and for building with
    newer versions of openssl

OBS-URL: https://build.opensuse.org/request/show/1187397
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-IO-Socket-SSL?expand=0&rev=157
2024-07-15 08:46:01 +00:00
938f1e724f add patch for operator precedence issue (revert unwanted changes)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-IO-Socket-SSL?expand=0&rev=156
2024-07-11 14:44:59 +00:00
41a6569b63 add patch for operator precedence issue
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-IO-Socket-SSL?expand=0&rev=155
2024-07-11 14:41:38 +00:00
babf85774f Accepting request 1186638 from devel:languages:perl:autoupdate
- updated to 2.87.0 (2.087)
   see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
  2.087 2024/07/08
  - support for PSK, see SSL_psk in documentation

OBS-URL: https://build.opensuse.org/request/show/1186638
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-IO-Socket-SSL?expand=0&rev=154
2024-07-11 11:50:12 +00:00
5b329f119d Accepting request 1185197 from devel:languages:perl:autoupdate
- updated to 2.86.0 (2.086)
   see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
  2.086 2024/07/03
  - internal optimzation: implement _touch_entry in session cache instead
     of using del+add.

OBS-URL: https://build.opensuse.org/request/show/1185197
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-IO-Socket-SSL?expand=0&rev=152
2024-07-04 13:44:00 +00:00
7 changed files with 122 additions and 51 deletions

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:95b2f7c0628a7e246a159665fbf0620d0d7835e3a940f22d3fdd47c3aa799c2e
size 265644

View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:7e764392b1b8bd44e654183c082b75be47800e98d7cd325f0e1b76c7d9a6b768
size 276128

12
README.md Normal file
View File

@@ -0,0 +1,12 @@
## Build Results
Current state of perl in openSUSE:Factory is
![Factory build results](https://br.opensuse.org/status/openSUSE:Factory/perl-IO-Socket-SSL/standard)
The current state of perl in the devel project build (devel:languages:perl)
![Devel project build results](https://br.opensuse.org/status/devel:languages:perl/perl-IO-Socket-SSL)

View File

@@ -1,5 +1,4 @@
patches:
perl-IO-Socket-SSL-use-system-default-cipher-list.patch: -p1 PATCH-FIX-UPSTREAM (bsc1200295) perl-IO-Socket-SSL doesn't follow system "PROFILE=SYSTEM" openSSL ciphers - https://git.centos.org/rpms/perl-IO-Socket-SSL/blob/e0b0ae04f5cdb41b1f29cb7d76c23abba7ac35e9/f/SOURCES/IO-Socket-SSL-2.066-use-system-default-cipher-list.patch
#patches:
ignore_requires: Mozilla::CA
prep: |-
rm README.Win32

View File

@@ -1,34 +0,0 @@
Index: IO-Socket-SSL-2.074/lib/IO/Socket/SSL.pm
===================================================================
--- IO-Socket-SSL-2.074.orig/lib/IO/Socket/SSL.pm
+++ IO-Socket-SSL-2.074/lib/IO/Socket/SSL.pm
@@ -205,8 +205,10 @@ my %DEFAULT_SSL_ARGS = (
SSL_npn_protocols => undef, # meaning depends whether on server or client side
SSL_alpn_protocols => undef, # list of protocols we'll accept/send, for example ['http/1.1','spdy/3.1']
- # rely on system default but be sure to disable some definitely bad ones
- SSL_cipher_list => 'DEFAULT !EXP !MEDIUM !LOW !eNULL !aNULL !RC4 !DES !MD5 !PSK !SRP',
+ # Use system-wide default cipher list to support use of system-wide
+ # crypto policy (#1076390, #1127577, CPAN RT#97816)
+ # https://fedoraproject.org/wiki/Changes/CryptoPolicy
+ SSL_cipher_list => 'PROFILE=SYSTEM',
);
my %DEFAULT_SSL_CLIENT_ARGS = (
Index: IO-Socket-SSL-2.074/lib/IO/Socket/SSL.pod
===================================================================
--- IO-Socket-SSL-2.074.orig/lib/IO/Socket/SSL.pod
+++ IO-Socket-SSL-2.074/lib/IO/Socket/SSL.pod
@@ -1070,9 +1070,8 @@ ciphers for TLS 1.2 and lower. See the O
for more details.
Unless you fail to contact your peer because of no shared ciphers it is
-recommended to leave this option at the default setting, which uses the system
-default but disables some insecure ciphers which might still be enabled on older
-systems.
+recommended to leave this option at the default setting, which honors the
+system-wide PROFILE=SYSTEM cipher list.
In case different cipher lists are needed for different SNI hosts a hash can be
given with the host as key and the cipher suite as value, similar to

View File

@@ -1,3 +1,98 @@
-------------------------------------------------------------------
Fri Jul 11 05:38:00 UTC 2025 - Tina Müller <timueller+perl@suse.de>
- updated to 2.95.0 (2.095)
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
2.095 2025/07/10
- regression: make sysread set buffer to empty string again when returning
EOf. Fixes #171
-------------------------------------------------------------------
Thu Jun 19 05:33:58 UTC 2025 - Tina Müller <timueller+perl@suse.de>
- updated to 2.94.0 (2.094)
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
2.094 2025/06/18
- fixed memory leak introduced in 2.092
2.093 2025/06/17
- Another rework for one-sided SSL shutdown, to a) implement a useful and secure
behavior and b) without affecting existing applications. 2.092 had still
unwanted side effects
2.092 2025/06/16
- rework implementation and behavior for one-sided SSL shutdown. Implementation
in 2.091 lead to some problems with Net::FTP and others.
2.091 2025/06/11
- fix behavior on one-sided SSL shutdown. If the application continued
to read after half-closing the SSL connection this could result in reading
encrypted data (i.e. close notify, SSL session tickets ...).
See documentation of stop_SSL for detailed description of handling
half-closed SSL connections.
-------------------------------------------------------------------
Tue Jun 3 05:35:44 UTC 2025 - Tina Müller <timueller+perl@suse.de>
- updated to 2.90.0 (2.090)
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
2.090 2025/06/03
- fix OCSP live test after Let's Encrypt has disabled OCSP support #169
- public_suffix now preserves trailing dot #167
-------------------------------------------------------------------
Sat Aug 31 05:33:49 UTC 2024 - Tina Müller <timueller+perl@suse.de>
- updated to 2.89.0 (2.089)
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
2.089 2024/08/29
- new option SSL_force_fingerprint to enforce fingerprint matching even if
certificate validation would be successful without
- document _get_ssl_object and _get_ctx_object for cases, where direct use of
Net::SSLeay functions is needed
-------------------------------------------------------------------
Sun Jul 14 16:02:28 UTC 2024 - Tina Müller <tina.mueller@suse.com>
- Remove patches 80315ed1a6a0b7968ce26284ed81b56c0ab288d9.patch,
perl-IO-Socket-SSL-use-system-default-cipher-list.patch (fixed upstream)
-------------------------------------------------------------------
Sun Jul 14 05:31:32 UTC 2024 - Tina Müller <timueller+perl@suse.de>
- updated to 2.88.0 (2.088)
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
2.088 2024/07/14
- minor fixes for use on ancient versions of perl and for building with
newer versions of openssl
-------------------------------------------------------------------
Thu Jul 11 14:38:31 UTC 2024 - Dirk Stoecker <opensuse@dstoecker.de>
- add 80315ed1a6a0b7968ce26284ed81b56c0ab288d9.patch to fix a error
introduced in version 2.087
-------------------------------------------------------------------
Tue Jul 9 05:30:33 UTC 2024 - Tina Müller <timueller+perl@suse.de>
- updated to 2.87.0 (2.087)
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
2.087 2024/07/08
- support for PSK, see SSL_psk in documentation
-------------------------------------------------------------------
Wed Jul 3 16:49:59 UTC 2024 - Tina Müller <tina.mueller@suse.com>
- updated to 2.86.0 (2.086)
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
2.086 2024/07/03
- internal optimzation: implement _touch_entry in session cache instead
of using del+add.
-------------------------------------------------------------------
Fri Mar 22 19:12:44 UTC 2024 - Tina Müller <tina.mueller@suse.com>

View File

@@ -1,7 +1,7 @@
#
# spec file for package perl-IO-Socket-SSL
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,26 +18,25 @@
%define cpan_name IO-Socket-SSL
Name: perl-IO-Socket-SSL
Version: 2.85.0
Version: 2.95.0
Release: 0
# 2.085 -> normalize -> 2.85.0
%define cpan_version 2.085
# 2.095 -> normalize -> 2.95.0
%define cpan_version 2.095
License: Artistic-1.0 OR GPL-1.0-or-later
Summary: Nearly transparent SSL encapsulation for IO::Socket::INET
URL: https://metacpan.org/release/%{cpan_name}
Source0: https://cpan.metacpan.org/authors/id/S/SU/SULLR/%{cpan_name}-%{cpan_version}.tar.gz
Source1: cpanspec.yml
# PATCH-FIX-UPSTREAM (bsc1200295) perl-IO-Socket-SSL doesn't follow system "PROFILE=SYSTEM" openSSL ciphers - https://git.centos.org/rpms/perl-IO-Socket-SSL/blob/e0b0ae04f5cdb41b1f29cb7d76c23abba7ac35e9/f/SOURCES/IO-Socket-SSL-2.066-use-system-default-cipher-list.patch
Patch0: perl-IO-Socket-SSL-use-system-default-cipher-list.patch
Source100: README.md
BuildArch: noarch
BuildRequires: perl
BuildRequires: perl-macros
#BuildRequires: perl(Mozilla::CA)
BuildRequires: perl(Net::SSLeay) >= 1.46
BuildRequires: perl(Net::SSLeay) >= 1.460
#Requires: perl(Mozilla::CA)
Requires: perl(Net::SSLeay) >= 1.46
Requires: perl(Net::SSLeay) >= 1.460
Provides: perl(IO::Socket::SSL) = %{version}
Provides: perl(IO::Socket::SSL::Intercept) = 2.056
Provides: perl(IO::Socket::SSL::Intercept) = 2.56.0
Provides: perl(IO::Socket::SSL::OCSP_Cache)
Provides: perl(IO::Socket::SSL::OCSP_Resolver)
Provides: perl(IO::Socket::SSL::PublicSuffix)
@@ -45,7 +44,7 @@ Provides: perl(IO::Socket::SSL::SSL_Context)
Provides: perl(IO::Socket::SSL::SSL_HANDLE)
Provides: perl(IO::Socket::SSL::Session_Cache)
Provides: perl(IO::Socket::SSL::Trace)
Provides: perl(IO::Socket::SSL::Utils) = 2.015
Provides: perl(IO::Socket::SSL::Utils) = 2.15.0
%undefine __perllib_provides
%{perl_requires}
@@ -89,7 +88,7 @@ Additional documentation can be found in
* * IO::Socket::SSL::Utils - Useful functions for certificates etc
%prep
%autosetup -n %{cpan_name}-%{cpan_version} -p1
%autosetup -n %{cpan_name}-%{cpan_version} -p1
find . -type f ! -path "*/t/*" ! -name "*.pl" ! -path "*/bin/*" ! -path "*/script/*" ! -path "*/scripts/*" ! -name "configure" -print0 | xargs -0 chmod 644
@@ -106,6 +105,6 @@ make test
%perl_gen_filelist
%files -f %{name}.files
%doc BUGS Changes docs example README README.Win32
%doc BUGS Changes docs example README
%changelog