5289b45 Update to 1.951

Authored and Committed by pghmcfc 10 years ago
    Update to 1.951
    
    - New upstream release 1.951
      (1.950)
      - MAJOR BEHAVIOR CHANGE:
        - ssl_verify_mode now defaults to verify_peer for client
        - Previously it used verify_none, but loudly complained since 1.79 about it
        - It will not complain any longer, but the connection will probably fail
        - Please don't simply disable ssl verification; instead, set SSL_ca_file
          etc. so that verification succeeds!
      - MAJOR BEHAVIOR CHANGE:
        - It will now complain if the built-in defaults of certs/my-ca.pem or ca/
          for CA and certs/{server,client}-{key,cert}.pem for cert and key are
          used, i.e. no certificates are specified explicitly
        - In the future these insecure (relative path!) defaults will be removed
          and the CA replaced with the system defaults
      (1.951)
      - Use Net::SSLeay::SSL_CTX_set_default_verify_paths to use openssl's built-in
        defaults for CA unless CA path/file was given (or IO::Socket::SSL built-ins
        used)
    
        
file modified
+27 -3
file modified
+1 -1