228fd437b4
- new version 0.951
* better document builtin defaults for key,cert,CA and how they are depreceated
* use Net::SSLeay::SSL_CTX_set_default_verify_paths to use
openssl's builtin defaults for CA unless CA path/file was given
* MAJOR BEHAVIOR CHANGE:
ssl_verify_mode now defaults to verify_peer for client. Until
now it used verify_none, but loudly complained since 1.79 about
it. It will not complain any longer, but the connection might
probably fail. Please don't simply disable ssl verification, but
instead set SSL_ca_file etc so that verification succeeds!
* MAJOR BEHAVIOR CHANGE:
it will now complain if the builtin defaults of certs/my-ca.pem
or ca/ for CA and certs/{server,client}-{key,cert}.pem for cert
and key are used, e.g. no certificates are specified explicitly.
In the future these insecure (relative path!) defaults will be
removed and the CA replaced with the system defaults.
* Makefile.PL reported wrong version of openssl, if Net::SSLeay was not
installed instead of reporting missing dependency to Net::SSLeay.
* need at least OpenSSL version 0.9.8 now, since last 0.9.7 was released 6
years ago. Remove code to work around older releases.
* changed AUTHOR in Makefile.PL from array back to string, because the
array feature is not available in MakeMaker shipped with 5.8.9 (RT#85739)
* Intercept: use sha1-fingerprint of original cert for id into cache unless
otherwise given
* Fix pod error in IO::Socket::SSL::Utils RT#85733
* added IO::Socket::SSL::Utils for easier manipulation of certificates and keys
* moved SSL interception into IO::Socket::SSL::Intercept and simplified it
using IO::Socket::SSL::Utils
* enhance meta information in Makefile.PL
* RT#85290, support more digest, especially SHA-2.
OBS-URL: https://build.opensuse.org/request/show/182138
OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/perl-IO-Socket-SSL?expand=0&rev=59
87 lines
2.8 KiB
RPMSpec
87 lines
2.8 KiB
RPMSpec
#
|
|
# spec file for package perl-IO-Socket-SSL
|
|
#
|
|
# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
Name: perl-IO-Socket-SSL
|
|
Version: 1.951
|
|
Release: 0
|
|
%define cpan_name IO-Socket-SSL
|
|
Summary: Nearly transparent SSL encapsulation for IO::Socket::INET
|
|
License: Artistic-1.0 or GPL-1.0+
|
|
Group: Development/Libraries/Perl
|
|
Url: http://search.cpan.org/dist/IO-Socket-SSL/
|
|
Source: http://www.cpan.org/modules/by-module/IO/%{cpan_name}-%{version}.tar.gz
|
|
BuildRequires: perl
|
|
# MANUAL BEGIN
|
|
BuildRequires: perl-macros
|
|
# the testsuite does not work with INET6 yet. If INET6 is enabled,
|
|
# at least netcfg has to be installed as well.
|
|
#BuildRequires: perl(IO::Socket::INET6)
|
|
BuildRequires: perl(Net::LibIDN)
|
|
BuildRequires: perl(Net::SSLeay) >= 1.46
|
|
Requires: perl(Net::SSLeay) >= 1.46
|
|
#Recommends: perl(IO::Socket::INET6)
|
|
Recommends: perl(Net::LibIDN)
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
BuildArch: noarch
|
|
# MANUAL END
|
|
%{perl_requires}
|
|
|
|
%description
|
|
This module is a true drop-in replacement for IO::Socket::INET that uses
|
|
SSL to encrypt data before it is transferred to a remote server or client.
|
|
IO::Socket::SSL supports all the extra features that one needs to write a
|
|
full-featured SSL client or server application: multiple SSL contexts,
|
|
cipher selection, certificate verification, and SSL version selection. As
|
|
an extra bonus, it works perfectly with mod_perl.
|
|
|
|
If you have never used SSL before, you should read the appendix labelled
|
|
'Using SSL' before attempting to use this module.
|
|
|
|
If you have used this module before, read on, as versions 0.93 and above
|
|
have several changes from the previous IO::Socket::SSL versions (especially
|
|
see the note about return values).
|
|
|
|
If you are using non-blocking sockets read on, as version 0.98 added better
|
|
support for non-blocking.
|
|
|
|
If you are trying to use it with threads see the BUGS section.
|
|
|
|
%prep
|
|
%setup -q -n %{cpan_name}-%{version}
|
|
|
|
%build
|
|
perl Makefile.PL INSTALLDIRS=vendor
|
|
make %{?_smp_mflags}
|
|
|
|
%install
|
|
%perl_make_install
|
|
%perl_process_packlist
|
|
%perl_gen_filelist
|
|
|
|
%check
|
|
make test
|
|
|
|
%clean
|
|
rm -rf %{buildroot}
|
|
|
|
%files -f %{name}.files
|
|
%defattr(-,root,root,755)
|
|
%doc BUGS Changes README
|
|
|
|
%changelog
|