# # spec file for package perl-IO-Socket-SSL (Version 1.24) # # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # # norootforbuild Name: perl-IO-Socket-SSL BuildRequires: perl-Net-SSLeay perl-libwww-perl Version: 1.24 Release: 1 Provides: p_iossl Obsoletes: p_iossl Requires: perl-Net-SSLeay perl-libwww-perl Requires: perl = %{perl_version} AutoReqProv: on Group: Development/Libraries/Perl License: Artistic License Url: http://cpan.org/modules/by-module/IO Summary: IO::Socket::SSL Perl Module Source: IO-Socket-SSL-%{version}.tar.bz2 BuildRoot: %{_tmppath}/%{name}-%{version}-build %description IO::Socket::SSL is a class implementing an object oriented interface to SSL sockets. The class is a descendant of IO::Socket::INET and provides a subset of the base class' interface methods. Authors: -------- %prep %setup -q -n IO-Socket-SSL-%{version} %build perl Makefile.PL make %check %if 0%{?opensuse_bs} # currently 127.0.0.1 resolves to hostname in OBS # and not to localhost rm -fv t/auto_verify_hostname %endif make test %install %perl_make_install %perl_process_packlist %clean rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root) %doc Changes BUGS README example util %doc %{_mandir}/man?/* %{perl_vendorlib}/IO %{perl_vendorarch}/auto/IO /var/adm/perl-modules/%{name} %changelog * Mon Apr 06 2009 anicka@suse.cz - update to 1.24 * add verify hostname scheme ftp, same as http * renew test certificates again (root CA expired, now valid for 10 years) * Mon Feb 23 2009 anicka@suse.cz - update to 1.23 * if neither SSL_ca_file nor SSL_ca_path are known (e.g not given and the default values have no existing file|path) disable checking of certificates, but carp about the problem * new test certificates, the old ones expired and caused tests to fail * Net::SSLeay stores verify callbacks inside hash and never clears them, so set verify callback to NULL in destroy of context * Tue Jan 20 2009 anicka@suse.cz - update to 1.20 * only changes on test suite to make it ready for win32 * fix verfycn_name autodetection from PeerAddr/PeerHost * fixed typo in argument: wildcars_in_cn -> wildcards_in_cn * no code changes, publish v.16_3 as v.17 because it looks better than v.16 * document win32 behavior regarding non-blocking and timeouts * fix t/nonblock.t with workaround for problems with IO::Socket::INET on some systems (Mac,5.6.2) where it cannot do nonblocking connect and leaves socket blocked. * make some tests less verbose by fixing diag in t/testlib.t (send output to STDOUT not STDERR and prefix with '#') * work around Bug in IO::Socket::INET6 on BSD systems http://rt.cpan.org/Ticket/Display.html?id=39550 by setting Domain based on PeerAddr * remove tests of recv/send from t/core.t. Might badly interact with SSL handshake and cause crashes as seen on OS X 10.4 * IPv6 is enabled by default if IO::Socket::INET6 is available * t/inet6.t for basic tests - remove last patch (fixed in upstream) * Mon Nov 17 2008 lnussel@suse.de - fix typo that prevented wildcards in CN (bnc#445678) * Mon Oct 06 2008 anicka@suse.cz - update to 1.16 * change code for SSL_check_crl to use X509_STORE_set_flags instead of X509_STORE_CTX_set_flags * change opened() to report -1 if the IO::Handle is open, but the SSL connection failed, needed with HTTP::Daemon::SSL which will send an error mssage over the unencrypted socket * Wed Sep 10 2008 anicka@suse.cz - update to 1.15 * change internal behavior when SSL handshake failed (like when verify callback returned an error) in the hope to fix spurios errors in t/auto_verify_hostname.t * Mon Aug 18 2008 ro@suse.de - hack to build also in buildservice where 127.0.0.1 can resolve to the hostname instead of localhost * Mon Aug 04 2008 ro@suse.de - update require for Net_SSLeay to Net-SSLeay * Fri Jul 25 2008 anicka@suse.cz - update to 1.14 * added support for verification of hostname from certificate including subjectAltNames, support for IDN etc * automatic verification of hostnames with SSL_verifycn_scheme and SSL_verifycn_name * global setting of default context options like SSL_verifycn_scheme, SSL_verify_mode with set_ctx_defaults * fix import of inet4,inet6 which got broken within 1.13_X. * clarified and enhanced debugging supppport * put information into README regarding the supported and recommanded version of Net::SSLeay * Mon Jan 28 2008 anicka@suse.cz - update to 1.13 * removed CLONE_SKIP which was added in 1.03 because this breaks windows forking. Handled threads/windows forking better by making sure that CTX from Net::SSLeay gets not freed multiple times from different threads after cloning/forking * removed setting LocalPort to 0 in tests, instead leave it undef if a random port should be allocated. * Thu Nov 01 2007 anicka@suse.cz - update to 1.12 * treat timeouts of 0 for accept_SSL and connect_SSL like no timeout, like IO::Socket does. * fixed errors in accept_SSL which would work when called from start_SSL but not from accept * start_SSL, accept_SSL and connect_SSL have argument for Timeout so that the SSL handshake will not block forever. Only used if the socket is blocking. If not set the Timeout value from the underlying IO::Socket is used * Mon Oct 08 2007 anicka@suse.cz - update to 1.09 * new method stop_SSL as opposite of start_SSL * try to make it clearer that thread support is buggy * make sure that Scalar::Util has support for dualvar (Makefile.PL,SSL.pm) because the perl*only version has has no dualvar * Mon Jun 11 2007 anicka@suse.cz - update to 1.07 * fix t/nonblock.t on systems which have by default a larger socket buffer. Set SO_SNDBUF explicitly with setsockopt to force smaller writes on the socket - move testing to %%check * Tue May 15 2007 anicka@suse.cz - update to 1.06 * instead of setting undef args to '' in configure_SSL drop them. This makes Net::SMTP::SSL working again because it does not give LocalPort of '' to IO::Socket::INET any more * Mon Apr 23 2007 anicka@suse.cz - update to 1.05 * make session cache working even if the IO::Socket::SSL object was not created with IO::Socket::SSL->new but with IO::Socket::SSL->start_SSL on an established socket * Fri Mar 30 2007 anicka@suse.cz - update to 1.04 * added way to create SSL object with predefined session cache * Wed Mar 07 2007 anicka@suse.cz - update to 1.03 * add CLONE_SKIP * Wed Dec 13 2006 anicka@suse.cz - update to 1.02 * added some info to BUGS and to BUGS section of pod * added TELL and BINMODE to IO::Socket::SSL::SSL_HANDLE, even if they do nothing useful. * all tests allocate now the ports dynamically, so there should be no longer a conflict with open ports on the system where the tests run * Thu Sep 14 2006 anicka@suse.cz - update to 1.01 * add support for Diffie Hellman Key Exchange. * accept_SSL sets errors on $socket (the accepted socket) not $self (the listening socket if called from accept) * many bugfixes * Mon Jul 24 2006 anicka@suse.cz - update to 0.993 * added test for sysread/syswrite behavior * fix Makefile.PL to allow detectection of failures in PREREQ_PM * fix problems with HTTP::Daemon::SSL * Tue Jul 18 2006 anicka@suse.cz - update to 0.99 * Maintainer changed to * Better support for nonblocking sockets * Bugfixes * Wed Jan 25 2006 mls@suse.de - converted neededforbuild to BuildRequires * Mon Aug 01 2005 mjancar@suse.cz - update to 0.97 * Wed Sep 29 2004 mls@suse.de - use X509_STORE_set_flags instead of X509_STORE_CTX_set_flags * Thu Aug 19 2004 mjancar@suse.cz - update to 0.96 * Thu Feb 26 2004 mjancar@suse.cz - update to 0.95 * Sun Jan 11 2004 adrian@suse.de - build as user * Fri Aug 22 2003 mjancar@suse.cz - require the perl version we build with * Thu Jul 24 2003 mjancar@suse.cz - update 0.94 * Thu Jul 17 2003 mjancar@suse.cz - adapt to perl-5.8.1 - use %%perl_process_packlist * Mon Jun 16 2003 mjancar@suse.cz - run make test - fix filelist * Tue May 20 2003 mjancar@suse.cz - remove unpackaged files * Fri Dec 20 2002 prehak@suse.cz - updated to 0.92 - added example directory * Wed Dec 18 2002 prehak@suse.cz - updated to version 0.901 * Thu Jul 11 2002 prehak@suse.cz - updated to version 0.81 - added demo, util and more to documetation * Tue Jul 02 2002 mls@suse.de - remove race in .packlist generation * Mon Jan 14 2002 rvasice@suse.cz - update to version 0.80 * Fri Aug 24 2001 rvasice@suse.cz - removed make test - need network * Tue Aug 14 2001 rvasice@suse.cz - update to version 0.79 - add make test * Tue Mar 13 2001 cihlar@suse.cz - update to version 0.77 * Fri Nov 10 2000 cihlar@suse.cz - renamed p_iossl -> perl-IO-Socket-SSL * Wed Aug 23 2000 cihlar@suse.cz - package created