4084ca1
Name:		perl-IO-Socket-SSL
3ed72db
Version:	1.93
6f7e6bc
Release:	1%{?dist}
4084ca1
Summary:	Perl library for transparent SSL
4084ca1
Group:		Development/Libraries
4084ca1
License:	GPL+ or Artistic
4084ca1
URL:		http://search.cpan.org/dist/IO-Socket-SSL/
6f7e6bc
Source0:	http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version}.tar.gz
5caac13
BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(id -nu)
4084ca1
BuildArch:	noarch
3ed72db
BuildRequires:	openssl >= 0.9.8
99c05d2
BuildRequires:	perl(Carp)
8d02977
BuildRequires:	perl(constant)
8d02977
BuildRequires:	perl(Exporter)
3ed72db
BuildRequires:	perl(ExtUtils::MakeMaker) >= 6.46
Petr Šabata afe37c0
BuildRequires:	perl(IO::Select)
8d02977
BuildRequires:	perl(IO::Socket)
Petr Šabata afe37c0
BuildRequires:	perl(IO::Socket::INET)
98862c2
BuildRequires:	perl(IO::Socket::INET6)
99c05d2
BuildRequires:	perl(Net::LibIDN)
805af9d
BuildRequires:	perl(Net::SSLeay) >= 1.46
Petr Šabata afe37c0
BuildRequires:	perl(Scalar::Util)
Petr Šabata afe37c0
BuildRequires:	perl(Socket)
98862c2
BuildRequires:	perl(Socket6)
408353c
BuildRequires:	procps
4146886
# Use IO::Socket::IP for IPv6 support where available, else IO::Socket::INET6
4146886
%if 0%{?fedora} > 15 || 0%{?rhel} > 6
2f01417
BuildRequires:	perl(IO::Socket::IP) >= 0.20, perl(Socket) >= 1.95
2f01417
Requires:	perl(IO::Socket::IP) >= 0.20, perl(Socket) >= 1.95
4146886
%else
4146886
Requires:	perl(IO::Socket::INET6), perl(Socket6)
4146886
%endif
5caac13
Requires:	perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version))
a2d6c29
Requires:	perl(Net::LibIDN)
3ed72db
Requires:	openssl >= 0.9.8
722e930
722e930
%description
722e930
This module is a true drop-in replacement for IO::Socket::INET that
722e930
uses SSL to encrypt data before it is transferred to a remote server
722e930
or client. IO::Socket::SSL supports all the extra features that one
722e930
needs to write a full-featured SSL client or server application:
722e930
multiple SSL contexts, cipher selection, certificate verification, and
722e930
SSL version selection. As an extra bonus, it works perfectly with
722e930
mod_perl.
722e930
722e930
%prep
6f7e6bc
%setup -q -n IO-Socket-SSL-%{version}
722e930
722e930
%build
5caac13
perl Makefile.PL INSTALLDIRS=vendor
5caac13
make %{?_smp_mflags}
722e930
722e930
%install
5caac13
rm -rf %{buildroot}
fa689fe
make pure_install DESTDIR=%{buildroot}
5caac13
find %{buildroot} -type f -name .packlist -exec rm -f {} ';'
a551f76
%{_fixperms} %{buildroot}
722e930
722e930
%check
5caac13
make test
722e930
722e930
%clean
5caac13
rm -rf %{buildroot}
722e930
722e930
%files
722e930
%doc BUGS Changes README docs/ certs/ example/ util/
722e930
%{perl_vendorlib}/IO/
a50dfc8
%{_mandir}/man3/IO::Socket::SSL.3pm*
9a569c9
%{_mandir}/man3/IO::Socket::SSL::Intercept.3pm*
9a569c9
%{_mandir}/man3/IO::Socket::SSL::Utils.3pm*
722e930
722e930
%changelog
3ed72db
* Fri May 31 2013 Paul Howarth <paul@city-fan.org> - 1.93-1
3ed72db
- Update to 1.93
3ed72db
  - Need at least OpenSSL version 0.9.8 now, since last 0.9.7 was released 6
3ed72db
    years ago; remove code to work around older releases
3ed72db
  - Changed AUTHOR in Makefile.PL from array back to string, because the array
3ed72db
    feature is not available in MakeMaker shipped with 5.8.9 (CPAN RT#85739)
3ed72db
- Set openssl version requirement to 0.9.8
3ed72db
- Drop ExtUtils::MakeMaker version requirement back to 6.46
3ed72db
476a8b5
* Thu May 30 2013 Paul Howarth <paul@city-fan.org> - 1.92-1
476a8b5
- Update to 1.92
476a8b5
  - Intercept: use sha1-fingerprint of original cert for id into cache unless
476a8b5
    otherwise given
476a8b5
  - Fix pod error in IO::Socket::SSL::Utils (CPAN RT#85733)
476a8b5
9a569c9
* Thu May 30 2013 Paul Howarth <paul@city-fan.org> - 1.91-1
9a569c9
- Update to 1.91
9a569c9
  - Added IO::Socket::SSL::Utils for easier manipulation of certificates and
9a569c9
    keys
9a569c9
  - Moved SSL interception into IO::Socket::SSL::Intercept and simplified it
9a569c9
    using IO::Socket::SSL::Utils
9a569c9
  - Enhance meta information in Makefile.PL
9a569c9
- Bump openssl version requirement to 0.9.8a
9a569c9
- Need at least version 6.58 of ExtUtils::MakeMaker (CPAN RT#85739)
9a569c9
805af9d
* Wed May 29 2013 Paul Howarth <paul@city-fan.org> - 1.90-1
805af9d
- Update to 1.90
805af9d
  - Support more digests, especially SHA-2 (CPAN RT#85290)
805af9d
  - Added support for easy SSL interception (man in the middle) based on ideas
805af9d
    found in mojo-mitm proxy
805af9d
  - Make 1.46 the minimal required version for Net::SSLeay, because it
805af9d
    introduced lots of useful functions
805af9d
- BR:/R: openssl ≥ 0.9.7e for P_ASN1_TIME_(get,set)_isotime in Net::SSLeay
805af9d
2f01417
* Tue May 14 2013 Paul Howarth <paul@city-fan.org> - 1.89-1
2f01417
- Update to 1.89
2f01417
  - If IO::Socket::IP is used it should be at least version 0.20; otherwise we
2f01417
    get problems with HTTP::Daemon::SSL and maybe others (CPAN RT#81932)
2f01417
  - Spelling corrections
2f01417
37d1376
* Thu May  2 2013 Paul Howarth <paul@city-fan.org> - 1.88-1
37d1376
- Update to 1.88
37d1376
  - Consider a value of '' the same as undef for SSL_ca_(path|file), SSL_key*
37d1376
    and SSL_cert* - some apps like Net::LDAP use it that way
37d1376
ed46e28
* Wed Apr 24 2013 Paul Howarth <paul@city-fan.org> - 1.87-1
ed46e28
- Update to 1.87
ed46e28
  - Complain if given SSL_(key|cert|ca)_(file|path) do not exist or if they are
ed46e28
    not readable (CPAN RT#84829)
ed46e28
  - Fix use of SSL_key|SSL_file objects instead of files, broken with 1.83
ed46e28
7e6deb8
* Wed Apr 17 2013 Paul Howarth <paul@city-fan.org> - 1.86-1
7e6deb8
- Update to 1.86
7e6deb8
  - Don't warn about SSL_verify_mode when re-using an existing SSL context
7e6deb8
    (CPAN RT#84686)
7e6deb8
ff45806
* Mon Apr 15 2013 Paul Howarth <paul@city-fan.org> - 1.85-1
ff45806
- Update to 1.85
ff45806
  - Probe for available modules with local __DIE__ and __WARN__handlers
ff45806
    (CPAN RT#84574)
883dd48
  - Fix warning, when IO::Socket::IP is installed and inet6 support gets
883dd48
    explicitly requested (CPAN RT#84619)
ff45806
6f7e6bc
* Sat Feb 16 2013 Paul Howarth <paul@city-fan.org> - 1.84-1
6f7e6bc
- Update to 1.84
6f7e6bc
  - Disabled client side SNI for openssl version < 1.0.0 because of
6f7e6bc
    CPAN RT#83289
6f7e6bc
  - Added functions can_client_sni, can_server_sni and can_npn to check
6f7e6bc
    availability of SNI and NPN features
6f7e6bc
  - Added more documentation for SNI and NPN
6f7e6bc
9d6d9c7
* Thu Feb 14 2013 Paul Howarth <paul@city-fan.org> - 1.83-2
9d6d9c7
- Update to 1.831
6f7e6bc
  - Separated documentation of non-blocking I/O from error handling
9d6d9c7
  - Changed and documented behavior of readline to return the read data on
9d6d9c7
    EAGAIN/EWOULDBLOCK in case of non-blocking socket
9d6d9c7
    (see https://github.com/noxxi/p5-io-socket-ssl/issues/1)
9d6d9c7
- Bumped release rather than version number to preserve likely upgrade path
9d6d9c7
  and avoid need for epoch or version number ugliness; may revisit this in
9d6d9c7
  light of upstream's future version numbering decisions
9d6d9c7
fa7cfc0
* Mon Feb  4 2013 Paul Howarth <paul@city-fan.org> - 1.83-1
fa7cfc0
- Update to 1.83
fa7cfc0
  - Server Name Indication (SNI) support on the server side (CPAN RT#82761)
fa7cfc0
  - Reworked part of the documentation, like providing better examples
fa7cfc0
5e52612
* Mon Jan 28 2013 Paul Howarth <paul@city-fan.org> - 1.82-1
5e52612
- Update to 1.82
5e52612
  - sub error sets $SSL_ERROR etc. only if there really is an error; otherwise
5e52612
    it will keep the latest error, which allows IO::Socket::SSL->new to report
5e52612
    the correct problem, even if the problem is deeper in the code (like in
5e52612
    connect)
5e52612
  - Correct spelling (CPAN RT#82790)
5e52612
98862c2
* Thu Dec  6 2012 Paul Howarth <paul@city-fan.org> - 1.81-1
98862c2
- Update to 1.81
98862c2
  - Deprecated set_ctx_defaults; new name is set_defaults (the old name is
98862c2
    still available)
98862c2
  - Changed handling of default path for SSL_(ca|cert|key)* keys: if one of
98862c2
    these keys is user defined, don't add defaults for the others, i.e.
98862c2
    don't mix user settings and defaults
98862c2
  - Cleaner handling of module defaults vs. global settings vs. socket
98862c2
    specific settings; global and socket specific settings are both provided
98862c2
    by the user, while module defaults are not
98862c2
  - Make IO::Socket::INET6 and IO::Socket::IP specific tests both run, even
98862c2
    if both modules are installed, by faking a failed load of the other module
98862c2
- BR: perl(IO::Socket::INET6) and perl(Socket6) unconditionally
98862c2
0c9239e
* Fri Nov 30 2012 Paul Howarth <paul@city-fan.org> - 1.80-1
0c9239e
- Update to 1.80
0c9239e
  - Removed some warnings in test (missing SSL_verify_mode => 0), which caused
0c9239e
    tests to hang on Windows (CPAN RT#81493)
0c9239e
4b03cab
* Sun Nov 25 2012 Paul Howarth <paul@city-fan.org> - 1.79-1
4b03cab
- Update to 1.79
4b03cab
  - Use getnameinfo instead of unpack_sockaddr_in6 to get PeerAddr and PeerPort
4b03cab
    from sockaddr in _update_peer, because this provides scope too
4b03cab
  - Work around systems that don't define AF_INET6 (CPAN RT#81216)
4b03cab
  - Prepare transition to a more secure default for SSL_verify_mode; the use of
4b03cab
    the current default SSL_VERIFY_NONE will cause a big warning for clients,
4b03cab
    unless SSL_verify_mode was explicitly set inside the application to this
4b03cab
    insecure value (in the near future the default will be SSL_VERIFY_PEER, and
4b03cab
    thus causing verification failures in unchanged applications)
4b03cab
Petr Šabata afe37c0
* Thu Nov 15 2012 Petr Šabata <contyk@redhat.com> - 1.77-2
Petr Šabata afe37c0
- Added some missing build dependencies
Petr Šabata afe37c0
aee95ec
* Fri Oct  5 2012 Paul Howarth <paul@city-fan.org> - 1.77-1
aee95ec
- Update to 1.77
aee95ec
  - support _update_peer for IPv6 too (CPAN RT#79916)
aee95ec
46462b9
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.76-3
46462b9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
46462b9
8edacfa
* Thu Jun 28 2012 Petr Pisar <ppisar@redhat.com> - 1.76-2
8edacfa
- Perl 5.16 rebuild
8edacfa
4146886
* Mon Jun 18 2012 Paul Howarth <paul@city-fan.org> - 1.76-1
4146886
- Update to 1.76
4146886
  - add support for IO::Socket::IP, which supports inet6 and inet4
4146886
    (CPAN RT#75218)
4146886
  - fix documentation errors (CPAN RT#77690)
4146886
  - made it possible to explicitly disable TLSv11 and TLSv12 in SSL_version
4146886
  - use inet_pton from either Socket.pm 1.95 or Socket6.pm
4146886
- Use IO::Socket::IP for IPv6 support where available, else IO::Socket::INET6
4146886
- Add runtime dependency for appropriate IPv6 support module so that we can
4146886
  ensure that we run at runtime what we tested with at build time
4146886
f4074b9
* Thu Jun 14 2012 Petr Pisar <ppisar@redhat.com> - 1.74-2
f4074b9
- Perl 5.16 rebuild
f4074b9
600d46f
* Mon May 14 2012 Paul Howarth <paul@city-fan.org> - 1.74-1
600d46f
- Update to 1.74
600d46f
  - accept a version of SSLv2/3 as SSLv23, because older documentation could
600d46f
    be interpreted like this
600d46f
7a4ecb3
* Fri May 11 2012 Paul Howarth <paul@city-fan.org> - 1.73-1
7a4ecb3
- Update to 1.73
7a4ecb3
  - set DEFAULT_CIPHER_LIST to ALL:!LOW instead of HIGH:!LOW
7a4ecb3
  - make test t/dhe.t hopefully work with more versions of openssl
7a4ecb3
a5c27d9
* Wed May  9 2012 Paul Howarth <paul@city-fan.org> - 1.71-1
a5c27d9
- Update to 1.71
a5c27d9
  - 1.70 done right: don't disable SSLv2 ciphers; SSLv2 support is better
a5c27d9
    disabled by the default SSL_version of 'SSLv23:!SSLv2'
a5c27d9
0151f67
* Tue May  8 2012 Paul Howarth <paul@city-fan.org> - 1.70-1
0151f67
- Update to 1.70
0151f67
  - make it possible to disable protocols using SSL_version, and make
0151f67
    SSL_version default to 'SSLv23:!SSLv2'
0151f67
cf5770d
* Tue May  8 2012 Paul Howarth <paul@city-fan.org> - 1.69-1
cf5770d
- Update to 1.69 (changes for CPAN RT#76929)
cf5770d
  - if no explicit cipher list is given, default to ALL:!LOW instead of the
cf5770d
    openssl default, which usually includes weak ciphers like DES
cf5770d
  - new config key SSL_honor_cipher_order and document how to use it to fight
cf5770d
    BEAST attack
cf5770d
  - fix behavior for empty cipher list (use default)
cf5770d
  - re-added workaround in t/dhe.t
cf5770d
04cfd05
* Mon Apr 16 2012 Paul Howarth <paul@city-fan.org> - 1.66-1
04cfd05
- Update to 1.66
04cfd05
  - make it thread safer (CPAN RT#76538)
04cfd05
f7be345
* Mon Apr 16 2012 Paul Howarth <paul@city-fan.org> - 1.65-1
f7be345
- Update to 1.65
f7be345
  - added NPN (Next Protocol Negotiation) support (CPAN RT#76223)
f7be345
126ee08
* Sat Apr  7 2012 Paul Howarth <paul@city-fan.org> - 1.64-1
126ee08
- Update to 1.64
126ee08
  - ignore die from within eval to make tests more stable on Win32
126ee08
    (CPAN RT#76147)
cf5770d
  - clarify some behavior regarding hostname verification
126ee08
- Drop patch for t/dhe.t, no longer needed
126ee08
25ec101
* Wed Mar 28 2012 Paul Howarth <paul@city-fan.org> - 1.62-1
25ec101
- Update to 1.62
25ec101
  - small fix to last version
25ec101
c823e4f
* Tue Mar 27 2012 Paul Howarth <paul@city-fan.org> - 1.61-1
c823e4f
- Update to 1.61
c823e4f
  - call CTX_set_session_id_context so that server's session caching works with
c823e4f
    client certificates too (CPAN RT#76053)
c823e4f
8d02977
* Tue Mar 20 2012 Paul Howarth <paul@city-fan.org> - 1.60-1
8d02977
- Update to 1.60
8d02977
  - don't make blocking readline if socket was set nonblocking, but return as
8d02977
    soon no more data are available (CPAN RT#75910)
8d02977
  - fix BUG section about threading so that it shows package as thread safe
8d02977
    as long as Net::SSLeay ≥ 1.43 is used (CPAN RT#75749)
8d02977
- BR: perl(constant), perl(Exporter) and perl(IO::Socket)
8d02977
3e7b01b
* Thu Mar  8 2012 Paul Howarth <paul@city-fan.org> - 1.59-1
3e7b01b
- Update to 1.59
3e7b01b
  - if SSLv2 is not supported by Net::SSLeay set SSL_ERROR with useful message
3e7b01b
    when attempting to use it
3e7b01b
  - modify constant declarations so that 5.6.1 should work again
3e7b01b
- Drop %%defattr, redundant since rpm 4.4
3e7b01b
99c05d2
* Mon Feb 27 2012 Paul Howarth <paul@city-fan.org> - 1.58-1
99c05d2
- Update to 1.58
99c05d2
  - fix t/dhe.t for openssl 1.0.1 beta by forcing TLSv1, so that it does not
99c05d2
    complain about the too small RSA key, which it should not use anyway; this
99c05d2
    workaround is not applied for older openssl versions, where it would cause
99c05d2
    failures (CPAN RT#75165)
99c05d2
- Add patch to fiddle the openssl version number in the t/dhe.t workaround
99c05d2
  because the OPENSSL_VERSION_NUMBER cannot be trusted in Fedora
99c05d2
- One buildreq per line for readability
99c05d2
- Drop redundant buildreq perl(Test::Simple)
99c05d2
- Always run full test suite
99c05d2
fa689fe
* Wed Feb 22 2012 Paul Howarth <paul@city-fan.org> - 1.56-1
fa689fe
- Update to 1.56
fa689fe
  - add automatic or explicit (via SSL_hostname) SNI support, needed for
fa689fe
    multiple SSL hostnames with the same IP (currently only supported for the
fa689fe
    client)
fa689fe
- Use DESTDIR rather than PERL_INSTALL_ROOT
fa689fe
- No need to delete empty directories from buildroot
fa689fe
4ac7986
* Mon Feb 20 2012 Paul Howarth <paul@city-fan.org> - 1.55-1
4ac7986
- Update to 1.55
4ac7986
  - work around IO::Socket's work around for systems returning EISCONN etc. on
4ac7986
    connect retry for non-blocking sockets by clearing $! if SUPER::connect
4ac7986
    returned true (CPAN RT#75101)
4ac7986
5ceb5a1
* Wed Jan 11 2012 Paul Howarth <paul@city-fan.org> - 1.54-1
5ceb5a1
- Update to 1.54
5ceb5a1
  - return 0 instead of undef in SSL_verify_callback to fix uninitialized
5ceb5a1
    warnings (CPAN RT#73629)
5ceb5a1
f032fb5
* Mon Dec 12 2011 Paul Howarth <paul@city-fan.org> - 1.53-1
f032fb5
- Update to 1.53
f032fb5
  - kill child in t/memleak_bad_handshake.t if test fails (CPAN RT#73146)
f032fb5
f26c71c
* Wed Dec  7 2011 Paul Howarth <paul@city-fan.org> - 1.52-1
f26c71c
- Update to 1.52
f26c71c
  - fix for t/nonblock.t hangs on AIX (CPAN RT#72305)
f26c71c
  - disable t/memleak_bad_handshake.t on AIX, because it might hang
f26c71c
    (CPAN RT#72170)
f26c71c
  - fix syntax error in t/memleak_bad_handshake.t
f26c71c
edb47ab
* Fri Oct 28 2011 Paul Howarth <paul@city-fan.org> - 1.49-1
edb47ab
- Update to 1.49
edb47ab
  - another regression for readline fix: this time it failed to return lines
edb47ab
    at EOF that don't end with newline - extended t/readline.t to catch this
edb47ab
    case and the fix for 1.48
edb47ab
fa11cf0
* Wed Oct 26 2011 Paul Howarth <paul@city-fan.org> - 1.48-1
fa11cf0
- Update to 1.48
fa11cf0
  - further fix for readline fix in 1.45: if the pending data were false (like
fa11cf0
    '0'), it failed to read the rest of the line (CPAN RT#71953)
fa11cf0
771cc6e
* Fri Oct 21 2011 Paul Howarth <paul@city-fan.org> - 1.47-1
771cc6e
- Update to 1.47
771cc6e
  - fix for 1.46 - check for mswin32 needs to be /i
771cc6e
a5d7b7b
* Tue Oct 18 2011 Paul Howarth <paul@city-fan.org> - 1.46-1
a5d7b7b
- Update to 1.46
a5d7b7b
  - skip signals test on Windows
a5d7b7b
90348cd
* Thu Oct 13 2011 Paul Howarth <paul@city-fan.org> - 1.45-1
90348cd
- Update to 1.45
90348cd
  - fix readline to continue when getting interrupt waiting for more data
90348cd
- BR: perl(Carp)
90348cd
Petr Sabata 4a6b2a4
* Tue Jul 19 2011 Petr Sabata <contyk@redhat.com> - 1.44-2
Petr Sabata 4a6b2a4
- Perl mass rebuild
Petr Sabata 4a6b2a4
13f80c7
* Fri May 27 2011 Paul Howarth <paul@city-fan.org> - 1.44-1
13f80c7
- Update to 1.44
13f80c7
  - fix invalid call to inet_pton in verify_hostname_of_cert when identity
13f80c7
    should be verified as ipv6 address because it contains a colon
13f80c7
33f897d
* Wed May 11 2011 Paul Howarth <paul@city-fan.org> - 1.43-1
33f897d
- Update to 1.43
33f897d
  - add SSL_create_ctx_callback to have a way to adjust context on creation
33f897d
    (CPAN RT#67799)
33f897d
  - describe problem of fake memory leak because of big session cache and how
33f897d
    to fix it (CPAN RT#68073)
33f897d
  - fix t/nonblock.t
33f897d
  - stability improvements for t/inet6.t
33f897d
546e8d9
* Tue May 10 2011 Paul Howarth <paul@city-fan.org> - 1.41-1
546e8d9
- Update to 1.41
546e8d9
  - fix issue in stop_SSL where it did not issue a shutdown of the SSL
546e8d9
    connection if it first received the shutdown from the other side
546e8d9
  - try to make t/nonblock.t more reliable, at least report the real cause of
546e8d9
    SSL connection errors
546e8d9
- No longer need to re-code docs to UTF-8
546e8d9
5caac13
* Mon May  2 2011 Paul Howarth <paul@city-fan.org> - 1.40-1
5caac13
- Update to 1.40
5caac13
  - fix in example/async_https_server
5caac13
  - get IDN support from URI (CPAN RT#67676)
5caac13
- Nobody else likes macros for commands
5caac13
099a308
* Thu Mar  3 2011 Paul Howarth <paul@city-fan.org> - 1.39-1
099a308
- Update to 1.39
099a308
  - fixed documentation of http verification: wildcards in cn is allowed
099a308
e2b100e
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.38-2
e2b100e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
e2b100e
e665b64
* Tue Jan 18 2011 Paul Howarth <paul@city-fan.org> - 1.38-1
e665b64
- Update to 1.38
e665b64
  - fixed wildcards_in_cn setting for http, wrongly set in 1.34 to 1 instead of
e665b64
    anywhere (CPAN RT#64864)
e665b64
f86243a
* Fri Dec 10 2010 Paul Howarth <paul@city-fan.org> - 1.37-1
f86243a
- Update to 1.37
f86243a
  - don't complain about invalid certificate locations if user explicitly set
f86243a
    SSL_ca_path and SSL_ca_file to undef: assume that user knows what they are
f86243a
    doing and will work around the problems themselves (CPAN RT#63741)
f86243a
bff4888
* Thu Dec  9 2010 Paul Howarth <paul@city-fan.org> - 1.36-1
bff4888
- Update to 1.36
bff4888
  - update documentation for SSL_verify_callback based on CPAN RT#63743 and
bff4888
    CPAN RT#63740
bff4888
bd90bed
* Mon Dec  6 2010 Paul Howarth <paul@city-fan.org> - 1.35-1
69a39b9
- Update to 1.35 (addresses CVE-2010-4334)
bd90bed
  - if verify_mode is not VERIFY_NONE and the ca_file/ca_path cannot be
bd90bed
    verified as valid, it will no longer fall back to VERIFY_NONE but throw an
bd90bed
    error (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606058)
bd90bed
eefbde6
* Tue Nov  2 2010 Paul Howarth <paul@city-fan.org> - 1.34-1
eefbde6
- Update to 1.34
eefbde6
  - schema http for certificate verification changed to wildcards_in_cn=1
eefbde6
  - if upgrading socket from inet to ssl fails due to handshake problems, the
eefbde6
    socket gets downgraded back again but is still open (CPAN RT#61466)
eefbde6
  - deprecate kill_socket: just use close()
eefbde6
5fc4b44
* Sun May 02 2010 Marcela Maslanova <mmaslano@redhat.com> - 1.33-2
5fc4b44
- Mass rebuild with perl-5.12.0
5fc4b44
390ab98
* Wed Mar 17 2010 Paul Howarth <paul@city-fan.org> - 1.33-1
390ab98
- Update to 1.33
390ab98
  - attempt to make t/memleak_bad_handshake.t more stable
390ab98
  - fix hostname checking: only check an IP against subjectAltName GEN_IPADD
390ab98
a551f76
* Tue Feb 23 2010 Paul Howarth <paul@city-fan.org> - 1.32-1
a551f76
- Update to 1.32 (die in Makefile.PL if Scalar::Util has no dualvar support)
a551f76
- Use %%{_fixperms} macro instead of our own %%{__chmod} incantation
a551f76
3e49d43
* Mon Dec  7 2009 Stepan Kasal <skasal@redhat.com> - 1.31-2
a551f76
- Rebuild against perl 5.10.1
3e49d43
7b32276
* Sun Sep 27 2009 Paul Howarth <paul@city-fan.org> - 1.31-1
7b32276
- Update to 1.31 (see Changes for details)
7b32276
408353c
* Thu Aug 20 2009 Paul Howarth <paul@city-fan.org> - 1.30-1
408353c
- Update to 1.30 (fix memleak when SSL handshake failed)
408353c
- Add buildreq procps needed for memleak test
408353c
fbcd92f
* Mon Jul 27 2009 Paul Howarth <paul@city-fan.org> - 1.27-1
fbcd92f
- Update to 1.27
fbcd92f
  - various regex fixes for i18n and service names
fbcd92f
  - fix warnings from perl -w (CPAN RT#48131)
fbcd92f
  - improve handling of errors from Net::ssl_write_all
fbcd92f
e16220e
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.26-2
e16220e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
e16220e
b6031e4
* Sat Jul  4 2009 Paul Howarth <paul@city-fan.org> - 1.26-1
b6031e4
- Update to 1.26 (verify_hostname_of_cert matched only the prefix for the
b6031e4
  hostname when no wildcard was given, e.g. www.example.org matched against a
fbcd92f
  certificate with name www.exam in it [#509819])
b6031e4
a50dfc8
* Fri Jul  3 2009 Paul Howarth <paul@city-fan.org> - 1.25-1
a50dfc8
- Update to 1.25 (fix t/nonblock.t for OS X 10.5 - CPAN RT#47240)
a50dfc8
08c3d74
* Thu Apr  2 2009 Paul Howarth <paul@city-fan.org> - 1.24-1
08c3d74
- Update to 1.24 (add verify hostname scheme ftp, same as http)
08c3d74
cfe8fbe
* Wed Feb 25 2009 Paul Howarth <paul@city-fan.org> - 1.23-1
cfe8fbe
- Update to 1.23 (complain when no certificates are provided)
cfe8fbe
dc5335b
* Sat Jan 24 2009 Paul Howarth <paul@city-fan.org> - 1.22-1
dc5335b
- Update to latest upstream version: 1.22
dc5335b
591ac20
* Thu Jan 22 2009 Paul Howarth <paul@city-fan.org> - 1.20-1
591ac20
- Update to latest upstream version: 1.20
591ac20
9cf5eac
* Tue Nov 18 2008 Paul Howarth <paul@city-fan.org> - 1.18-1
9cf5eac
- Update to latest upstream version: 1.18
9cf5eac
- BR: perl(IO::Socket::INET6) for extra test coverage
9cf5eac
43c3bd4
* Mon Oct 13 2008 Paul Howarth <paul@city-fan.org> - 1.17-1
43c3bd4
- Update to latest upstream version: 1.17
43c3bd4
274abb4
* Mon Sep 22 2008 Paul Howarth <paul@city-fan.org> - 1.16-1
274abb4
- Update to latest upstream version: 1.16
274abb4
a2d6c29
* Sat Aug 30 2008 Paul Howarth <paul@city-fan.org> - 1.15-1
a2d6c29
- Update to latest upstream version: 1.15
a2d6c29
- Add buildreq and req for perl(Net::LibIDN) to avoid croaking when trying to
a2d6c29
  verify an international name against a certificate
a2d6c29
4149234
* Wed Jul 16 2008 Paul Howarth <paul@city-fan.org> - 1.14-1
4149234
- Update to latest upstream version: 1.14
4149234
- BuildRequire perl(Net::SSLeay) >= 1.21
4149234
f4442d1
* Wed Feb 27 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 1.12-4
f4442d1
- Rebuild for perl 5.10 (again)
f4442d1
52e30cc
* Thu Jan 31 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 1.12-3
a2d6c29
- Rebuild for new perl
52e30cc
4084ca1
* Wed Nov 28 2007 Paul Howarth <paul@city-fan.org> - 1.12-2
4084ca1
- Cosmetic spec changes suiting new maintainer's preferences
4084ca1
629eb3a
* Fri Oct 26 2007 Robin Norwood <rnorwood@redhat.com> - 1.12-1
629eb3a
- Update to latest upstream version: 1.12
629eb3a
- Fix license tag
629eb3a
- Add BuildRequires for ExtUtils::MakeMaker and Test::Simple
629eb3a
- Fix package review issues:
629eb3a
- Source URL
629eb3a
- Resolves: bz#226264
629eb3a
33ba1b8
* Tue Oct 16 2007 Tom "spot" Callaway <tcallawa@redhat.com> - 1.02-1.1
a2d6c29
- Correct license tag
a2d6c29
- Add BR: perl(ExtUtils::MakeMaker)
33ba1b8
e847dca
* Sat Dec 02 2006 Robin Norwood <rnorwood@redhat.com> - 1.02-1
e847dca
- Upgrade to latest CPAN version: 1.02
e847dca
7e7f983
* Mon Sep 18 2006 Warren Togami <wtogami@redhat.com> - 1.01-1
7e7f983
- 1.01 bug fixes (#206782)
7e7f983
aea3889
* Sun Aug 13 2006 Warren Togami <wtogami@redhat.com> - 0.998-1
aea3889
- 0.998 with more important fixes
aea3889
d6a2148
* Tue Aug 01 2006 Warren Togami <wtogami@redhat.com> - 0.994-1
d6a2148
- 0.994 important bugfixes (#200860)
d6a2148
f2aaba7
* Tue Jul 18 2006 Warren Togami <wtogami@redhat.com> - 0.991-1
f2aaba7
- 0.991
f2aaba7
722e930
* Wed Jul 12 2006 Warren Togami <wtogami@redhat.com> - 0.97-3
a2d6c29
- Import into FC6
722e930
722e930
* Tue Feb 28 2006 Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.97-2
722e930
- Rebuild for FC5 (perl 5.8.8).
722e930
- Rebuild switch: "--with sessiontests".
722e930
722e930
* Mon Jul 18 2005 Ville Skyttä <ville.skytta at iki.fi> - 0.97-1
722e930
- 0.97.
722e930
- Convert docs to UTF-8, drop some unuseful ones.
722e930
9d6d9c7
* Wed Apr  6 2005 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.96-4
a2d6c29
- Rebuilt
722e930
722e930
* Tue Oct 12 2004 Ville Skyttä <ville.skytta at iki.fi> - 0:0.96-3
722e930
- Disable session test suite even if Net::SSLeay >= 1.26 is available.
722e930
722e930
* Wed Jul  7 2004 Ville Skyttä <ville.skytta at iki.fi> - 0:0.96-0.fdr.2
722e930
- Bring up to date with current fedora.us Perl spec template.
722e930
- Include examples in docs.
722e930
722e930
* Sat May  1 2004 Ville Skyttä <ville.skytta at iki.fi> - 0:0.96-0.fdr.1
722e930
- Update to 0.96.
722e930
- Reduce directory ownership bloat.
722e930
- Require perl(:MODULE_COMPAT_*).
722e930
722e930
* Fri Oct 17 2003 Ville Skyttä <ville.skytta at iki.fi> - 0:0.95-0.fdr.1
722e930
- First build.