1c83562d62- updated to 2.064 see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes 2.064 - make algorithm for fingerprint optional, i.e. detect based on length of fingerprint - https://rt.cpan.org/Ticket/Display.html?id=127773 - fix t/sessions.t and improve stability of t/verify_hostname.t on windows - use CTX_set_ecdh_auto when needed (OpenSSL 1.0.2) if explicit curves are set - update fingerprints for live tests 2.063 - support for both RSA and ECDSA certificate on same domain - update PublicSuffix - Refuse to build if Net::SSLeay is compiled with one version of OpenSSL but then linked against another API-incompatible version (ie. more than just the patchlevel differs).
Stephan Kulow
2019-03-05 11:55:47 +0000
61db23a742Accepting request 678527 from devel:languages:perl
Stephan Kulow
2019-02-28 20:25:09 +0000
b95ed039e3Accepting request 528222 from devel:languages:perl
Dominique Leuenberger
2017-09-25 11:49:05 +0000
1d04b4d755Accepting request 528108 from home:vitezslav_cizek:branches:devel:languages:perlPedro Monreal Gonzalez2017-09-22 08:10:47 +0000
71d0303a9fAccepting request 385293 from devel:languages:perl
Dominique Leuenberger
2016-04-11 07:11:16 +0000
922a84d50cAccepting request 385206 from devel:languages:perl:autoupdate
P. Janouch
2016-04-06 12:08:44 +0000
aacdc5a2efAccepting request 370293 from devel:languages:perl
Dominique Leuenberger
2016-03-18 20:29:30 +0000
50877499ac- remove perl-IO-Socket-SSL_fix_offline.patch
Stephan Kulow
2016-03-11 21:35:05 +0000
252820815dAccepting request 369963 from devel:languages:perl:autoupdate
Stephan Kulow
2016-03-11 21:33:35 +0000
af7616071cAccepting request 315528 from devel:languages:perl
Stephan Kulow
2015-07-21 11:24:22 +0000
84db6defebAccepting request 315527 from home:coolo:branches:devel:languages:perl
Stephan Kulow
2015-07-08 04:55:52 +0000
e1e8c6d932Accepting request 311427 from devel:languages:perl
Dominique Leuenberger
2015-06-12 18:27:49 +0000
a1add617f0Accepting request 310914 from devel:languages:perl:autoupdate
Stephan Kulow
2015-06-10 10:42:32 +0000
319f4e1714Accepting request 307139 from devel:languages:perl
Stephan Kulow
2015-05-16 05:13:03 +0000
578179054aAccepting request 307105 from devel:languages:perl:autoupdate
Stephan Kulow
2015-05-14 15:30:00 +0000
217333d2b8Accepting request 306781 from devel:languages:perl:autoupdate
Stephan Kulow
2015-05-13 15:00:18 +0000
366c8a9b06Accepting request 305006 from devel:languages:perl
Dominique Leuenberger
2015-05-04 22:54:33 +0000
38d252340cAccepting request 304994 from devel:languages:perl:autoupdate
Stephan Kulow
2015-05-02 08:04:16 +0000
fff63685fdAccepting request 297987 from devel:languages:perl
Dominique Leuenberger
2015-04-21 23:12:30 +0000
d2e34d78bdAccepting request 297942 from home:vitezslav_cizek:branches:devel:languages:perl
Stephan Kulow
2015-04-19 07:10:15 +0000
49675887d8Accepting request 296333 from devel:languages:perl:autoupdate
Stephan Kulow
2015-04-15 04:42:00 +0000
106329dde0Accepting request 242336 from devel:languages:perl
Stephan Kulow
2014-07-28 04:31:02 +0000
3360ccea26update
Stephan Kulow
2014-07-25 09:50:24 +0000
3bea3ae897Accepting request 227174 from devel:languages:perl
Stephan Kulow
2014-03-27 05:08:52 +0000
db88179956update
Stephan Kulow
2014-03-23 06:22:46 +0000
e7c6e95ad2Accepting request 221506 from devel:languages:perl
Stephan Kulow
2014-02-12 16:32:12 +0000
978fadfd7c- updated to 1.967 - verify the hostname inside a certificate by default with a superset of common verification schemes instead of not verifying identity at all. For now it will only complain if name verification failed, in the future it will fail certificate verification, forcing you to set the expected SSL_verifycn_name if you want to accept the certificate. - new option SSL_fingerprint and new methods get_fingerprint and get_fingerprint_bin. Together they can be used to selectively accept specific certificates which would otherwise fail verification, like self-signed, outdated or from unknown CAs. This makes another reason to disable verification obsolete. - Utils: - default RSA key length 2048 - digest algorithm to sign certificate in CERT_create can be given, defaults to SHA-256 - CERT_create can now issue non-CA selfsigned certificate - CERT_create add some more useful constraints to certificate - spelling fixes, thanks to ville[dot]skytta[at]iki[dot]fi 1.966 2014/01/21 - fixed bug introduced in 1.964 - disabling TLSv1_2 worked no longer with specifying !TLSv12, only !TLSv1_2 worked - fixed leak of session objects in SessionCache, if another session replaced an existing session (introduced in 1.965) 1.965 2014/01/16 - new key SSL_session_key to influence how sessions are inserted and looked up in the clients session cache. This makes it possible to share sessions over different ip:host (like required with some FTPS servers) - t/core.t - handle case, were default loopback source is not 127.0.0.1, like in FreeBSD jails 1.964 2014/01/15
Stephan Kulow
2014-02-09 14:36:31 +0000
d486f7e6ecAccepting request 208877 from devel:languages:perl
Stephan Kulow
2013-11-29 15:25:08 +0000
2149b12eb2update
Stephan Kulow
2013-11-29 11:17:04 +0000
ff4a6e6d1cAccepting request 208439 from devel:languages:perl
Stephan Kulow
2013-11-26 18:25:41 +0000
8fa2af46bfupdate
Stephan Kulow
2013-11-26 08:14:16 +0000
823a58f5a5Accepting request 202212 from devel:languages:perl
Tomáš Chvátal
2013-10-06 12:53:50 +0000
795e4b0fd5update
Stephan Kulow
2013-10-04 11:45:41 +0000
a1416ade3fAccepting request 184797 from devel:languages:perl
Stephan Kulow
2013-07-30 16:43:51 +0000
c68333df45- updated to 1.953 - fixes to IO::Socket::SSL::Utils, thanks to rurban[AT]x-ray[DOT]at, RT#87052 - fix t/acceptSSL-timeout.t on Win32, RT#86862
Stephan Kulow
2013-07-27 12:19:06 +0000
f6c49fe7adAccepting request 184296 from devel:languages:perl
Stephan Kulow
2013-07-25 12:46:29 +0000
228fd437b4Accepting request 182138 from home:lnussel:branches:devel:languages:perl
Lars Vogdt
2013-07-25 09:25:21 +0000
873afd6d3f- update to 1.88 + consider a value of '' the same as undef for SSL_ca_(path|file) + complain if given SSL_(key|cert|ca)_(file|path) do not exist or if they are not readable + disabled client side SNI for openssl version < 1.0.0 + added functions can_client_sni, can_server_sni, can_npn to check avaibility of SNI and NPN features. Added more documentation for SNI and NPN + Server Name Indication (SNI) support on the server side + sub error sets $SSL_ERROR etc only if there really is an error, otherwise it will keep the latest error. This causes IO::Socket::SSL->new.. to report the correct problem, even if the problem is deeper in the code (like in connect) + deprecated set_ctx_defaults, new name ist set_defaults + changed handling of default path for SSL_(ca|cert|key)* keys: either if one of these keys is user defined don't add defaults for the others, e.g. don't mix user settings and defaults + cleaner handling of module defaults vs. global settings vs. socket specific settings + prepare transition to a more secure default for SSL_verify_mode. The use of the current default SSL_VERIFY_NONE will cause a big warning for clients, unless SSL_verify_mode was explicitly set inside the application to this insecure value. In the near future the default will be SSL_VERIFY_PEER, and thus causing verification failures in unchanged applications. + use getnameinfo instead of unpack_sockaddr_in6 to get PeerAddr and PeerPort from sockaddr in _update_peer, because this provides scope + work around systems which don't defined AF_INET6 + update_peer for IPv6 also + no longer depend on Socket.pm 1.95 for inet_pton, but use
Lars Vogdt
2013-05-11 23:06:34 +0000
b745629f93Accepting request 107589 from devel:languages:perl
Stephan Kulow
2012-03-01 16:24:25 +0000
4b7cbd55fe- update to 1.55 - work around IO::Sockets work around for systems returning EISCONN etc on connect retry for non-blocking sockets by clearing $! if SUPER::connect returned true. https://rt.cpan.org/Ticket/Display.html?id=75101 Thanks for Manoj Kumar for reporting.
Vítězslav Čížek
2012-02-22 08:29:05 +0000
c80c0a9164Accepting request 103907 from devel:languages:perl
Stephan Kulow
2012-02-14 12:09:21 +0000