Accepting request 705653 from devel:languages:perl
OBS-URL: https://build.opensuse.org/request/show/705653 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/perl-Net-SSLeay?expand=0&rev=31
This commit is contained in:
Git OBS Bridge
commit
b4fcb195ac
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:28518e246f3c1b444a95518080e47ca15ad2a8eda53b682f1a2a36c0bf7843d8
|
|
||||||
size 416532
|
|
||||||
3
Net-SSLeay-1.88.tar.gz
Normal file
3
Net-SSLeay-1.88.tar.gz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:2000da483c8471a0b61e06959e92a6fca7b9e40586d5c828de977d3d2081cfdd
|
||||||
|
size 436215
|
||||||
@ -1,3 +1,136 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon May 27 11:29:57 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
||||||
|
|
||||||
|
- Update to 1.88
|
||||||
|
1.88 2019-05-10
|
||||||
|
- New stable release incorporating all changes from developer
|
||||||
|
releases 1.86_01 to 1.86_11.
|
||||||
|
- From this release, Net-SSLeay is switching to an "odd/even"
|
||||||
|
developer/stable release version numbering system, like that of
|
||||||
|
many core modules (e.g. ExtUtils::MakeMaker): developer releases
|
||||||
|
will have an odd minor version number (and the usual "_xx" suffix),
|
||||||
|
and stable releases will have an even minor version number. This
|
||||||
|
means there is no Net-SSLeay 1.87.
|
||||||
|
- Summary of major changes since version 1.85:
|
||||||
|
- Mike McCauley has stepped down as maintainer. The new maintainers
|
||||||
|
are Chris Novakovic, Heikki Vatiainen and Tuure Vartiainen.
|
||||||
|
- The source code has moved from the now-defunct Debian Subversion
|
||||||
|
server (alioth.debian.org) to GitHub
|
||||||
|
(https://github.com/radiator-software/p5-net-ssleay).
|
||||||
|
- Net-SSLeay is provided under the terms of the Artistic License
|
||||||
|
2.0 - this has been the case since version 1.66, but references
|
||||||
|
to other licenses remained in the source code, causing ambiguity.
|
||||||
|
- Perl 5.8.1 or newer is now required to use Net-SSLeay. This has
|
||||||
|
already been the case for some time in practice, as the test
|
||||||
|
suite hasn't fully passed on Perl 5.6 for several years.
|
||||||
|
- Much-improved compatibility with OpenSSL 1.1.1, and improved
|
||||||
|
support for TLS 1.3.
|
||||||
|
- Fixed a long-standing bug in cb_data_advanced_put() that caused
|
||||||
|
memory leaks when callbacks were frequently added and removed.
|
||||||
|
- Support in the test suite for "hardened" OpenSSL configurations
|
||||||
|
that set a default security level of 2 or higher (e.g., in the
|
||||||
|
OpenSSL packages that ship with recent versions of Debian, Fedora
|
||||||
|
and Ubuntu).
|
||||||
|
|
||||||
|
1.86_11 2019-05-08
|
||||||
|
- Clarified Net-SSLeay's licensing terms: the module distribution has
|
||||||
|
been released under the terms of the Artistic License 2.0 since
|
||||||
|
version 1.66; references to other licenses have been removed. Fixes
|
||||||
|
RT#106314. Thanks to Kent Fredric for pointing out the ambiguity.
|
||||||
|
- Replace the HTTPS hosts in the external tests (some of which were
|
||||||
|
no longer online) with more resilient ones. Closes issue #26.
|
||||||
|
|
||||||
|
1.86_10 2019-05-04
|
||||||
|
- Use locally-generated certificate chain in local tests rather
|
||||||
|
than the Twitter one, which changes regularly and breaks the
|
||||||
|
test suite unnecessarily. Fixes RT#129201. Thanks to Petr Písař
|
||||||
|
for the report and patch, and Steffen Ullrich for an alternative
|
||||||
|
patch suggestion.
|
||||||
|
- In t/local/09_ctx_new.t, rather than checking that the functions
|
||||||
|
(CTX_)get_min_proto_version and (CTX_)get_max_proto_version return
|
||||||
|
0x0000 (indicating the lowest and highest versions supported by
|
||||||
|
libssl respectively, which is not the case if a run-time
|
||||||
|
configuration is enforcing a different minimum or maximum), just
|
||||||
|
check whether the returned value is one of those mentioned on the
|
||||||
|
SSL_CTX_set_min_proto_version(3) man page. Partially fixes
|
||||||
|
RT#128025. Thanks to Slaven Rezić and Dmytro Zagashev for the
|
||||||
|
downstream reports.
|
||||||
|
- Move from 1024-bit keys/certificates to 2048-bit keys/certificates
|
||||||
|
across the entire test suite. This removes the need to manually
|
||||||
|
set the security level to 1 in tests that used the old keys, and
|
||||||
|
fixes large numbers of test failures on modern Linux distributions
|
||||||
|
that set the minimum OpenSSL security level to 2. Fixes RT#126270
|
||||||
|
and the remainder of RT#128025. Thanks to Petr Písař and Slaven
|
||||||
|
Rezić for the downstream reports.
|
||||||
|
- In t/local/06_tcpecho.t and t/local/07_sslecho.t, connect to
|
||||||
|
127.0.0.1 instead of localhost. This fixes these tests when
|
||||||
|
executed inside a network sandbox that disrupts the behaviour of
|
||||||
|
gethostbyname(). Fixes RT#128207. Thanks to Kent Fredric for the
|
||||||
|
downstream report.
|
||||||
|
|
||||||
|
1.86_09 2019-03-12
|
||||||
|
- Add missing files to MANIFEST that prevented tests from passing
|
||||||
|
when installing from the 1.86_08 release tarball.
|
||||||
|
|
||||||
|
1.86_08 2019-03-12
|
||||||
|
- Add and fix functions needed to properly implement client
|
||||||
|
side session reuse for TLS 1.3 with using
|
||||||
|
CTX_sess_set_new_cb. Newly exposed functions:
|
||||||
|
SSL_SESSION_dup and SSL_SESSION_up_ref.
|
||||||
|
Fixed functions: i2d_SSL_SESSION and d2i_SSL_SESSION.
|
||||||
|
Thanks to Steffen Ullrich.
|
||||||
|
- Add functions functions to allow reading multiple pems from
|
||||||
|
file and creating untrusted chain: These functions allow you
|
||||||
|
to:
|
||||||
|
- Read in a PEM file with multiple certificates as a
|
||||||
|
STACK_OF(X509_INFO)
|
||||||
|
- Determine the size of the STACK_OF(X509_INFO) and value at
|
||||||
|
an index, which allows you to loop over the stack.
|
||||||
|
- Retrieve the X509 structure from each X509_INFO structure
|
||||||
|
in the stack.
|
||||||
|
Then you can create a new STACK_OF(X509) and push the X509
|
||||||
|
structures onto the new stack. You can then pass this
|
||||||
|
STACK_OF(X509) to X509_STORE_CTX_init which will allow you
|
||||||
|
to add additional untrusted certificates to the chain for
|
||||||
|
verification. Exposed functions are:
|
||||||
|
PEM_X509_INFO_read_bio
|
||||||
|
sk_X509_INFO_num
|
||||||
|
sk_X509_INFO_value
|
||||||
|
sk_X509_INFO_free
|
||||||
|
sk_X509_new_null
|
||||||
|
sk_X509_free
|
||||||
|
sk_X509_push
|
||||||
|
New function implemented by Net::SSLeay:
|
||||||
|
P_X509_INFO_get_x509
|
||||||
|
Thanks to Marc Reisner.
|
||||||
|
- Add functions and constants that are necessary to verify a
|
||||||
|
certificate using a hash directory outside of an SSL/TLS
|
||||||
|
connection. Newly exposed functions:
|
||||||
|
X509_STORE_CTX_init
|
||||||
|
X509_STORE_CTX_free
|
||||||
|
X509_STORE_new
|
||||||
|
X509_STORE_free
|
||||||
|
X509_STORE_add_lookup
|
||||||
|
X509_LOOKUP_hash_dir
|
||||||
|
X509_LOOKUP_add_dir
|
||||||
|
Newly exposed constants:
|
||||||
|
X509_FILETYPE_ASN1
|
||||||
|
X509_FILETYPE_DEFAULT
|
||||||
|
X509_FILETYPE_PEM
|
||||||
|
Thanks to Marc Reisner.
|
||||||
|
- Declare n_a in ssleay_set_psk_client_callback_invoke and
|
||||||
|
ssleay_ctx_set_psk_client_callback_invoke to avoid a compilation
|
||||||
|
error with Perl versions below 5.8.8. Fixes RT#128030. Thanks to
|
||||||
|
Graham Ollis for the report.
|
||||||
|
- Add X509_get0_serialNumber. Thanks to Marc Reisner.
|
||||||
|
- Enable Travis CI for LibreSSL 2.2.1, 2.7.5, 2.8.3 and 2.9.0
|
||||||
|
on Perl 5.20 and more recent.
|
||||||
|
- Expose the following functions for curve and group selection:
|
||||||
|
- CTX_set_ecdh_auto, set_ecdh_auto
|
||||||
|
- CTX_set1_curves_list, set1_curves_list
|
||||||
|
- CTX_set1_groups_list, set1_groups_list
|
||||||
|
Thanks to Steffen Ullrich.
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Tue Mar 5 14:04:18 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
Tue Mar 5 14:04:18 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
||||||
|
|
||||||
|
|||||||
@ -18,14 +18,13 @@
|
|||||||
|
|
||||||
%define cpan_name Net-SSLeay
|
%define cpan_name Net-SSLeay
|
||||||
Name: perl-Net-SSLeay
|
Name: perl-Net-SSLeay
|
||||||
Version: 1.86_07
|
Version: 1.88
|
||||||
Release: 0
|
Release: 0
|
||||||
Summary: Perl extension for using OpenSSL
|
Summary: Perl extension for using OpenSSL
|
||||||
License: Artistic-2.0
|
License: Artistic-2.0
|
||||||
Group: Development/Libraries/Perl
|
Group: Development/Libraries/Perl
|
||||||
URL: http://search.cpan.org/dist/Net-SSLeay/
|
URL: https://metacpan.org/release/%{cpan_name}
|
||||||
#Source: http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz
|
Source0: https://cpan.metacpan.org/authors/id/C/CH/CHRISN/%{cpan_name}-%{version}.tar.gz
|
||||||
Source: https://cpan.metacpan.org/authors/id/R/RA/RADIATOR/%{cpan_name}-%{version}.tar.gz
|
|
||||||
BuildRequires: libopenssl-devel
|
BuildRequires: libopenssl-devel
|
||||||
BuildRequires: openssl
|
BuildRequires: openssl
|
||||||
BuildRequires: perl
|
BuildRequires: perl
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user