bb304e
%if ! (0%{?rhel})
ab8cb0
%{bcond_without perl_Net_SSLeay_enables_optional_test}
bb304e
%else
bb304e
%{bcond_with perl_Net_SSLeay_enables_optional_test}
bb304e
%endif
ab8cb0
1072ca
# Provides/Requires filtering is different from rpm 4.9 onwards
7c4054
%global rpm49 %(rpm --version | perl -p -e 's/^.* (\\d+)\\.(\\d+).*/sprintf("%d.%03d",$1,$2) ge 4.009 ? 1 : 0/e' 2>/dev/null || echo 0)
1072ca
ef0a04
Name:		perl-Net-SSLeay
6999ed
Version:	1.85
da8913
Release:	11%{?dist}
ef0a04
Summary:	Perl extension for using OpenSSL
debac6
License:	Artistic 2.0
2efb08
URL:		https://metacpan.org/release/Net-SSLeay
2efb08
Source0:	https://cpan.metacpan.org/authors/id/M/MI/MIKEM/Net-SSLeay-%{version}.tar.gz
49c2c7
# Adapt to OpenSSL 1.1.1, bug #1614884, CPAN RT#125218
49c2c7
Patch0:		Net-SSLeay-1.85-Adapt-to-OpenSSL-1.1.1.patch
4f3095
# Adapt tests to system-wide crypto policy, bug #1614884
4f3095
Patch1:		Net-SSLeay-1.85-Adapt-CTX_get_min_proto_version-tests-to-system-wide.patch
2eec92
# Avoid SIGPIPE in t/local/36_verify.t, bug #1614884, CPAN RT#125218
ad61fc
Patch2:		Net-SSLeay-1.85-Avoid-SIGPIPE-in-t-local-36_verify.t.patch
d608c1
# Revert retry in Net::SSLeay::{read,write}(), bug #1614884, CPAN RT#125218
ad61fc
Patch3:		Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-.patch
0dbcb7
# Revert retry in Net::SSLeay::write_partial(), bug #1614884, CPAN RT#125218
ad61fc
Patch4:		Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-from_write_partial.patch
ad61fc
# Expose SSL_CTX_set_post_handshake_auth (#1630391)
ad61fc
# https://github.com/radiator-software/p5-net-ssleay/pull/68
ad61fc
Patch5:		Net-SSLeay-1.85-Expose_SSL_CTX_set_post_handshake_auth.patch
da8913
# Get libraries to link against from pkg-config
da8913
# Adapted from https://github.com/radiator-software/p5-net-ssleay/pull/127
da8913
Patch10:	Net-SSLeay-1.85-pkgconfig.patch
6e9992
# =========== Module Build ===========================
67656c
BuildRequires:	coreutils
67656c
BuildRequires:	findutils
67656c
BuildRequires:	gcc
67656c
BuildRequires:	make
59631e
BuildRequires:	openssl
59631e
BuildRequires:	openssl-devel
b6c287
BuildRequires:	perl-devel
19b4a0
BuildRequires:	perl-generators
43f465
BuildRequires:	perl-interpreter
a97d30
BuildRequires:	perl(Cwd)
7c6314
BuildRequires:	perl(ExtUtils::MakeMaker)
da8913
BuildRequires:	perl(ExtUtils::PkgConfig)
da8913
BuildRequires:	perl(ExtUtils::MM)
da8913
BuildRequires:	perl(File::Basename)
a97d30
BuildRequires:	perl(File::Path)
a97d30
BuildRequires:	perl(lib)
6e9992
# =========== Module Runtime =========================
6e9992
BuildRequires:	perl(AutoLoader)
6e9992
BuildRequires:	perl(Carp)
6e9992
BuildRequires:	perl(Exporter)
6a58ef
BuildRequires:	perl(MIME::Base64)
056dde
BuildRequires:	perl(Socket)
6e9992
BuildRequires:	perl(XSLoader)
6e9992
# =========== Test Suite =============================
e3ea32
BuildRequires:	perl(Config)
6e9992
BuildRequires:	perl(File::Spec)
c7b175
BuildRequires:	perl(HTTP::Tiny)
6e9992
BuildRequires:	perl(IO::Handle)
e3ea32
BuildRequires:	perl(IO::Socket::INET)
e3ea32
BuildRequires:	perl(strict)
8f84ff
BuildRequires:	perl(Test::More) >= 0.61
ab8cb0
BuildRequires:	perl(threads)
e3ea32
BuildRequires:	perl(warnings)
ab8cb0
# =========== Optional Test Suite ====================
e3ea32
%if %{with perl_Net_SSLeay_enables_optional_test}
ab8cb0
BuildRequires:	perl(Test::Exception)
7c6314
BuildRequires:	perl(Test::NoWarnings)
bd9552
BuildRequires:	perl(Test::Pod) >= 1.0
6a58ef
BuildRequires:	perl(Test::Warn)
ab8cb0
%endif
67656c
# =========== Module Runtime =========================
7c6314
Requires:	perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version))
a97d30
Requires:	perl(MIME::Base64)
6e9992
Requires:	perl(XSLoader)
fa1d7f
a3bb1c
# Don't "provide" private Perl libs or the redundant unversioned perl(Net::SSLeay) provide
a3bb1c
%global __provides_exclude ^(perl\\(Net::SSLeay\\)$|SSLeay\\.so)
6a5998
fa1d7f
%description
1d8b1e
This module offers some high level convenience functions for accessing
fa1d7f
web pages on SSL servers (for symmetry, same API is offered for
fa1d7f
accessing http servers, too), a sslcat() function for writing your own
7c63ac
clients, and finally access to the SSL API of SSLeay/OpenSSL package
fa1d7f
so you can write servers or clients for more complicated applications.
fa1d7f
fa1d7f
%prep
ef0a04
%setup -q -n Net-SSLeay-%{version}
49c2c7
%patch0 -p1
4f3095
%patch1 -p1
2eec92
%patch2 -p1
d608c1
%patch3 -p1
0dbcb7
%patch4 -p1
ad61fc
%patch5 -p1
fab18d
da8913
# Get libraries to link against from pkg-config
da8913
# Adapted from https://github.com/radiator-software/p5-net-ssleay/pull/127
da8913
%patch10 -b .pkgconfig
da8913
327192
# Fix permissions in examples to avoid bogus doc-file dependencies
e042be
chmod -c 644 examples/*
fa1d7f
a3bb1c
# Remove redundant unversioned provide if we don't have rpm 4.9 or later
1072ca
%if ! %{rpm49}
a3bb1c
%global provfilt /bin/sh -c "%{__perl_provides} | grep -Fvx 'perl(Net::SSLeay)'"
7030d2
%global __perl_provides %{provfilt}
1072ca
%endif
a3bb1c
fa1d7f
%build
e042be
PERL_MM_USE_DEFAULT=1 perl Makefile.PL \
4941c9
	INSTALLDIRS=vendor \
4941c9
	OPTIMIZE="%{optflags}"
e042be
make %{?_smp_mflags}
fa1d7f
fa1d7f
%install
056dde
make pure_install DESTDIR=%{buildroot}
59631e
find %{buildroot} -type f -name .packlist -delete
59631e
find %{buildroot} -type f -name '*.bs' -empty -delete
43f465
%{_fixperms} -c %{buildroot}
fa1d7f
7c63ac
# Remove script we don't want packaged
7c63ac
rm -f %{buildroot}%{perl_vendorarch}/Net/ptrtstrun.pl
7c63ac
fa1d7f
%check
bd9552
make test
fa1d7f
fa1d7f
%files
debac6
%if 0%{?_licensedir:1}
debac6
%license LICENSE
debac6
%else
debac6
%doc LICENSE
debac6
%endif
debac6
%doc Changes Credits QuickRef README examples/
fa1d7f
%{perl_vendorarch}/auto/Net/
f27f8d
%dir %{perl_vendorarch}/Net/
f27f8d
%{perl_vendorarch}/Net/SSLeay/
f27f8d
%{perl_vendorarch}/Net/SSLeay.pm
f27f8d
%doc %{perl_vendorarch}/Net/SSLeay.pod
1072ca
%{_mandir}/man3/Net::SSLeay.3*
1072ca
%{_mandir}/man3/Net::SSLeay::Handle.3*
fa1d7f
fa1d7f
%changelog
da8913
* Fri Nov  1 2019 Paul Howarth <paul@city-fan.org> - 1.85-11
da8913
- Get libraries to link against from pkg-config (#1704785)
da8913
  Adapted from https://github.com/radiator-software/p5-net-ssleay/pull/127
da8913
8bbd33
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.85-10
8bbd33
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
8bbd33
05e7d5
* Sat Sep 29 2018 Paul Howarth <paul@city-fan.org> - 1.85-9
05e7d5
- OpenSSL 1.1.1 in Fedora disables SSL3 API, so stop trying to test it
05e7d5
ad61fc
* Wed Sep 19 2018 Paul Howarth <paul@city-fan.org> - 1.85-8
ad61fc
- Expose SSL_CTX_set_post_handshake_auth (#1630391)
ad61fc
  https://github.com/radiator-software/p5-net-ssleay/pull/68
ad61fc
0dbcb7
* Fri Aug 17 2018 Petr Pisar <ppisar@redhat.com> - 1.85-7
0dbcb7
- Revert retry in Net::SSLeay::write_partial() (bug #1614884)
0dbcb7
d608c1
* Wed Aug 15 2018 Petr Pisar <ppisar@redhat.com> - 1.85-6
d608c1
- Revert retry in Net::SSLeay::{read,write}() (bug #1614884)
d608c1
2eec92
* Tue Aug 14 2018 Petr Pisar <ppisar@redhat.com> - 1.85-5
2eec92
- Avoid SIGPIPE in t/local/36_verify.t (bug #1614884)
2eec92
49c2c7
* Mon Aug 13 2018 Petr Pisar <ppisar@redhat.com> - 1.85-4
49c2c7
- Adapt to OpenSSL 1.1.1 (bug #1614884)
4f3095
- Adapt tests to system-wide crypto policy (bug #1614884)
49c2c7
4ca76d
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.85-3
4ca76d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
4ca76d
ff5516
* Thu Jun 28 2018 Jitka Plesnikova <jplesnik@redhat.com> - 1.85-2
ff5516
- Perl 5.28 rebuild
ff5516
6999ed
* Wed Mar 14 2018 Paul Howarth <paul@city-fan.org> - 1.85-1
6999ed
- Update to 1.85
6999ed
  - Preparations for transferring maintenace to a new maintainer
6999ed
  - Fixed test failure in t/local/33_x509_create_cert.t for some versions of
6999ed
    OpenSSL
6999ed
  - Fixed free() error that causes "Free to wrong pool ..." message on Windows
6999ed
d95fb0
* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.84-2
d95fb0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
d95fb0
3c6e2e
* Wed Jan 17 2018 Paul Howarth <paul@city-fan.org> - 1.84-1
3c6e2e
- Update to 1.84
3c6e2e
  - Fixed an error in t/local/04_basic.t causing a test failure if
3c6e2e
    Test::Exception not installed
3c6e2e
e3ea32
* Tue Jan 16 2018 Paul Howarth <paul@city-fan.org> - 1.83-1
e3ea32
- Update to 1.83
e3ea32
  - Fixed a problem with exporting OPENSSL_NO_NEXTPROTONEG even though they
3c6e2e
    are not available on LibreSSL
e3ea32
  - Add support for SSL_set_default_passwd_cb* for OpenSSL 1.1.0f and later;
e3ea32
    LibreSSL does not support these functions, at least yet
e3ea32
  - Add new functions related to SSL_CTX_new
e3ea32
  - Add two new functions introduced in OpenSSL 1.1.0, a number of constants
e3ea32
    and a couple of const qualifiers to SSLeay.xs; tests and documentation .pod
e3ea32
    were also updated
e3ea32
  - Added support for SSL_use_certificate_chain_file function introduced in
e3ea32
    OpenSSL 1.1.0
e3ea32
  - Fixed LibreSSL version detection to correctly parse LibreSSL minor version
e3ea32
  - Fix memory leaks in OCSP handling
e3ea32
  - Add new functions for certificate verification introduced in OpenSSL 1.02,
e3ea32
    a number of constants, new test data files, new tests and updates to .pod
e3ea32
    documentation; the new functions provide access to the built-in wildcard
e3ea32
    check functionality available in OpenSSL 1.0.2 and later
e3ea32
  - Added X509_STORE_CTX_new and X509_verify_cert
e3ea32
  - SSL_OCSP_response_verify now clears the error queue if OCSP_basic_verify
e3ea32
    fails but the intermediate certificate succeeds
e3ea32
43f465
* Tue Oct 31 2017 Paul Howarth <paul@city-fan.org> - 1.82-1
43f465
- Update to 1.82
43f465
  - Added support for building under Linuxbrew (a linuxbrew version of MacOS
43f465
    Homebrew)
43f465
  - Implement SSL_CTX_set_psk_client_callback() and
43f465
    SSL_set_psk_client_callback()
43f465
  - Skip the NPN test if the SSL library is LibreSSL
43f465
  - Fixed a problem with a variable declaration in
43f465
    ssleay_session_secret_cb_invoke
43f465
  - Bugfix: tlsext_status_cb_invoke(...): free ocsp_response only when
43f465
    allocated; the same callback is used on a server side for OCSP stapling
43f465
    and in that case ocsp_response is NULL and not used
43f465
  - New feature: Added a binding
43f465
    SSL_set_session_ticket_ext_cb(ssl, callback, data); a callback used by
43f465
    EAP-FAST/EAP-TEAT to parse and process TLS session ticket
43f465
  - New feature: Added a binding SSL_set_session_ticket_ext(ssl, ticket); used
43f465
    by EAP-FAST/EAP-TEAP to define TLS session ticket value
43f465
  - Bugfix: tlsext_ticket_key_cb_invoke(...): allow SHA256 HMAC key to be 32
43f465
    bytes instead of 16 bytes (which OpenSSL will pad with zeros up to 32
43f465
    bytes)
43f465
  - New feature: Added following bindings:
43f465
    - X509_get_ex_data(cert, idx)
43f465
    - X509_get_ex_new_index(argl, argp, new_func, dup_func, free_func)
43f465
    - X509_get_app_data(cert)
43f465
    - X509_set_ex_data(cert, idx, data)
43f465
    - X509_set_app_data(cert, arg)
43f465
    - X509_STORE_CTX_get_ex_new_index(argl, argp, new_func, dup_func, free_func)
43f465
    - X509_STORE_CTX_get_app_data(x509_store_ctx)
43f465
    - X509_STORE_CTX_set_app_data(x509_store_ctx, arg)
43f465
  - New feature: Added an implementation for
43f465
    SSL_get_finished(ssl, buf, count=2*EVP_MAX_MD_SIZE)
43f465
  - New feature: Added an implementation for
43f465
    SSL_get_peer_finished(ssl, buf, count=2*EVP_MAX_MD_SIZE)
43f465
  - Bugfix: SSL_get_keyblock_size(s): Calculate key block size correctly also
43f465
    with AEAD ciphers, which don’t use digest functions
43f465
  - New feature: Added a binding SSL_set_tlsext_status_ocsp_resp(ssl, staple);
43f465
    used by a server side to include OCSP staple in ServerHello
43f465
  - Bugfix: SSL_OCSP_response_verify(ssl, rsp, svreq, flags): check that chain
43f465
    and last are not NULL before trying to use them
43f465
  - Bugfix: inc/Module/Install/PRIVATE/Net/SSLeay.pm: Don’t quote include and
43f465
    lib paths
43f465
- Drop EL-5 support
43f465
  - Drop BuildRoot: and Group: tags
43f465
  - Drop explicit buildroot cleaning in %%install section
43f465
  - Drop explicit %%clean section
43f465
c4b201
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.81-4
c4b201
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
c4b201
153d22
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.81-3
153d22
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
153d22
b915ad
* Sun Jun 04 2017 Jitka Plesnikova <jplesnik@redhat.com> - 1.81-2
b915ad
- Perl 5.26 rebuild
b915ad
62017f
* Tue Mar 28 2017 Paul Howarth <paul@city-fan.org> - 1.81-1
62017f
- Update to 1.81
62017f
  - Enable RSA_get_key_parameters with LibreSSL - again
62017f
  - Fixed memory leak in X509_get_subjectAltNames
62017f
  - Added . to lib path in Makefile.PL to accommodate people who are using a
62017f
    perl with -Ddefault_inc_excludes_dot
62017f
  - Fixed build failure if engine support not present
62017f
  - Improvements to get_my_thread_id to work around possibility of ERRSV not
62017f
    being defined, e.g. on OpenWRT
62017f
fe2b2e
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.80-2
fe2b2e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
fe2b2e
d61f8b
* Thu Jan  5 2017 Paul Howarth <paul@city-fan.org> - 1.80-1
d61f8b
- Update to 1.80
d61f8b
  - Fix unexpected changes in the control flow of the Perl program that seemed
d61f8b
    to be triggered by the ticket key callback
d61f8b
bf2a3b
* Tue Jan  3 2017 Paul Howarth <paul@city-fan.org> - 1.79-1
bf2a3b
- Update to 1.79
bf2a3b
  - Patch to fix a few inline variable declarations that cause errors for older
bf2a3b
    compilers
bf2a3b
  - Patch: Generated C code is not compatible with MSVC, AIX cc, probably
bf2a3b
    others; added some PREINIT blocks and replaced 2 cases of INIT with PREINIT
bf2a3b
  - Fix compile failure if the OpenSSL library it's built against has
bf2a3b
    compression support compiled out
bf2a3b
  - Added RSA_get_key_parameters() to return a list of pointers to RSA key
bf2a3b
    internals (only available prior to OpenSSL 1.1)
bf2a3b
  - Fix some documentation typos
bf2a3b
  - Testing with openssl-1.1.0b
bf2a3b
10e076
* Wed Oct 12 2016 Paul Howarth <paul@city-fan.org> - 1.78-2
10e076
- Rebuild for OpenSSL 1.1.0 in Fedora 26
10e076
a218f8
* Sun Aug 14 2016 Paul Howarth <paul@city-fan.org> - 1.78-1
a218f8
- Update to 1.78
a218f8
  - Fixed broken (since 1.75) OCSP code and tests
a218f8
78424d
* Thu Aug 11 2016 Paul Howarth <paul@city-fan.org> - 1.77-2
78424d
- Fix OCSP (CPAN RT#116795)
78424d
1cebed
* Mon Aug  1 2016 Paul Howarth <paul@city-fan.org> - 1.77-1
1cebed
- Update to 1.77
1cebed
  - Fixed incorrect size to memset in tlsext_ticket_key_cb_invoke
1cebed
b30ee2
* Sun Jul 31 2016 Paul Howarth <paul@city-fan.org> - 1.76-1
b30ee2
- Update to 1.76
b30ee2
  - Compatibility with OpenSSL 1.1, tested with openssl-1.1.0-pre5:
b30ee2
    - Conditionally remove threading locking code, not needed in 1.1
b30ee2
    - Rewrite code that accesses inside X509_ATTRIBUTE struct
b30ee2
    - SSL_CTX_need_tmp_RSA, SSL_CTX_set_tmp_rsa, SSL_CTX_set_tmp_rsa_callback,
b30ee2
      SSL_set_tmp_rsa_callback support not available in 1.1
b30ee2
    - SSL_session_reused is now native
b30ee2
    - SSL_get_keyblock_size modifed to use new API
b30ee2
    - OCSP functions modified to use new API under 1.1
b30ee2
    - SSL_set_state removed with 1.1
b30ee2
    - SSL_get_state and SSL_state are now equivalent and available in all
b30ee2
      versions
b30ee2
    - SSL_CTX_v2_new removed
b30ee2
    - SESSION_set_master_key removed with 1.1; code that previously used
b30ee2
      SESSION_set_master_key must now set $secret in the session_secret
b30ee2
      callback set with SSL_set_session_secret_cb
b30ee2
    - With 1.1, $secret in the session_secret callback set with
b30ee2
      SSL_set_session_secret_cb can be changed to alter the master key
b30ee2
      (required by EAP-FAST)
b30ee2
  - Added a function EC_KEY_generate_key similar to RSA_generate_key and a
b30ee2
    function EVP_PKEY_assign_EC_KEY similar to EVP_PKEY_assign_RSA; using
b30ee2
    these functions it is easy to create and use EC keys in the same way as RSA
b30ee2
    keys
b30ee2
  - Testing with LibreSSL 2.4.1
b30ee2
  - Provide support for cross context (and cross process) session sharing using
b30ee2
    the stateless TLS session tickets
b30ee2
  - Added documentation about downloading latest version from SVN
b30ee2
  - Added missing Module/install files to SVN
b30ee2
7c4054
* Thu Jul 21 2016 Paul Howarth <paul@city-fan.org> - 1.74-3
7c4054
- Fix FTBFS when perl isn't in the SRPM build root
7c4054
1be7d2
* Sun May 15 2016 Jitka Plesnikova <jplesnik@redhat.com> - 1.74-2
1be7d2
- Perl 5.24 rebuild
1be7d2
71451c
* Tue Apr 12 2016 Paul Howarth <paul@city-fan.org> - 1.74-1
71451c
- Update to 1.74
71451c
  - README.OSX was missing from the distribution
71451c
59631e
* Mon Apr 11 2016 Paul Howarth <paul@city-fan.org> - 1.73-1
59631e
- Update to 1.73
59631e
  - Added X509_get_X509_PUBKEY
59631e
  - Added README.OSX with instructions on how to build for recent OS X
59631e
  - Added info about using OPENSSL_PREFIX to README.Win32
59631e
  - Added comments in POD about installation documentation
59631e
  - Added '/usr/local/opt/openssl/bin/openssl' to Openssl search path for
59631e
    latest version of OSX homebrew openssl
59631e
- Simplify find commands using -delete
59631e
c61161
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.72-3
c61161
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
c61161
7030d2
* Fri Jan 15 2016 Paul Howarth <paul@city-fan.org> - 1.72-2
7030d2
- Prefer %%global over %%define
7030d2
b263d1
* Tue Sep 22 2015 Paul Howarth <paul@city-fan.org> - 1.72-1
b263d1
- Update to 1.72
b263d1
  - Fixed a problem where SvPVx_nolen was undefined in some versions of perl;
b263d1
    replaced with SvPV_nolen
b263d1
  - Fixed a cast warning on Darwin
b263d1
b6c287
* Fri Sep 18 2015 Paul Howarth <paul@city-fan.org> - 1.71-1
b6c287
- Update to 1.71
b6c287
  - Conditionalize support for MD4, MD5
b6c287
  - Added support for linking libraries in /usr/local/lib64 for some flavours
b6c287
    of Linux like RH Tikanga
b6c287
  - Fixes to X509_check_host, X509_check_ip, SSL_CTX_set_alpn_protos, and
b6c287
    SSL_set_alpn_protos so they will compile on MSVC and AIX cc
b6c287
  - Fixed typos in documentation for X509_NAME_new and X509_NAME_hash
b6c287
  - Version number in META.yml is now quoted
b6c287
- Explicitly BR: perl-devel, needed for EXTERN.h
b6c287
67656c
* Fri Jun 26 2015 Paul Howarth <paul@city-fan.org> - 1.70-1
67656c
- Update to 1.70
67656c
  - The new OpenSSL 1.0.2 X509_check_* functions are not available in current
67656c
    LibreSSL, so disable them in SSLeay.xs
67656c
  - Fixed a problem with building against OSX homebrew's openssl
67656c
  - Removed a test in t/local/33_x509_create_cert.t that fails due to changes
67656c
    in 1.0.1n and later
67656c
99546b
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.69-3
99546b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
99546b
c3cf34
* Tue Jun 09 2015 Jitka Plesnikova <jplesnik@redhat.com> - 1.69-2
c3cf34
- Perl 5.22 rebuild
c3cf34
0c25d4
* Sun Jun  7 2015 Paul Howarth <paul@city-fan.org> - 1.69-1
0c25d4
- Update to 1.69
0c25d4
  - Testing with OpenSSL 1.0.2, 1.0.2a OK
0c25d4
  - Completed LibreSSL compatibility
0c25d4
  - Improved compatibility with OpenSSL 1.0.2a
0c25d4
  - Added the X509_check_* functions introduced in OpenSSL 1.0.2
0c25d4
  - Added support for X509_V_FLAG_TRUSTED_FIRST constant
0c25d4
  - Allow get_keyblock_size to work correctly with OpenSSL 1.0.1 onwards
0c25d4
0af7e5
* Fri Jun 05 2015 Jitka Plesnikova <jplesnik@redhat.com> - 1.68-3
0af7e5
- Perl 5.22 rebuild
0af7e5
3db5d9
* Mon May 18 2015 Paul Howarth <paul@city-fan.org> - 1.68-2
3db5d9
- SSLv3_method not dropped in OpenSSL 1.0.2, so revert that change (#1222521)
3db5d9
1072ca
* Fri Jan 30 2015 Paul Howarth <paul@city-fan.org> - 1.68-1
1072ca
- Update to 1.68
1072ca
  - Improvements to inc/Module/Install/PRIVATE/Net/SSLeay.pm to handle the case
1072ca
    where there are muliple OPENSSLs installed
1072ca
  - Fixed a documentation error in get_peer_cert_chain
1072ca
  - Fixed a problem with building on Windows that prevented correct OpenSSL
1072ca
    directory detection with version 1.0.1j as delivered with Shining Light
1072ca
    OpenSSL
1072ca
  - Fixed a problem with building on Windows that prevented finding MT or MD
1072ca
    versions of SSL libraries
1072ca
  - Updated doc in README.Win32 to build with Microsoft Visual Studio 2010
1072ca
    Express
1072ca
  - Added Windows crypt32 library to Windows linking as some
1072ca
    compilers/platforms seem to require it and it is innocuous otherwise
1072ca
  - Fixed a failure in t/external/20_cert_chain.t where some platforms do not
1072ca
    have HTTPS in /etc/services
1072ca
  - Recent 1.0.2 betas have dropped the SSLv3_method function; we leave out
1072ca
    the function on newer versions, much the same as the SSLv2 deprecation is
1072ca
    handled
1072ca
  - Fix the ALPN test, which was incorrectly failing on OpenSSL due to the
1072ca
    LibreSSL check (earlier versions bailed out before that line)
1072ca
  - Fixed a problem on OSX when macports openssl 1.x is installed: headers from
1072ca
    macport were found but older OSX openssl libraries were linked, resulting
1072ca
    in "Symbol not found: _EVP_MD_do_all_sorted"
1072ca
  - Added notes about runtime error "no OPENSSL_Applink", when calling
1072ca
    Net::SSLeay::P_PKCS12_load_file
1072ca
- Don't change %%{__perl_provides} unless we need to
1072ca
000383
* Tue Sep 09 2014 Jitka Plesnikova <jplesnik@redhat.com> - 1.66-2
000383
- Perl 5.20 mass
000383
debac6
* Mon Sep  8 2014 Paul Howarth <paul@city-fan.org> - 1.66-1
debac6
- Update to 1.66
debac6
  - Fixed compile problem with perl prior to 5.8.8, similar to CPAN RT#76267
debac6
  - Fixed a problem with Socket::IPPROTO_TCP on early perls
debac6
  - After discussions with the community and the original author Sampo
debac6
    Kellomaki, the license conditions have been changed to "Perl Artistic
debac6
    License 2.0"
debac6
- License changed to Artistic 2.0
debac6
- Use %%license where possible
debac6
701bf5
* Thu Aug 28 2014 Jitka Plesnikova <jplesnik@redhat.com> - 1.65-3
701bf5
- Perl 5.20 rebuild
701bf5
446a43
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.65-2
446a43
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
446a43
96e67f
* Tue Jul 15 2014 Paul Howarth <paul@city-fan.org> - 1.65-1
96e67f
- Update to 1.65
96e67f
  - Added note to docs to make it clear that X509_get_subjectAltNames returns a
96e67f
    packed binary IP address for type 7 - GEN_IPADD
96e67f
  - Improvements to SSL_OCSP_response_verify to compile under non-c99 compilers
96e67f
  - Port to Android, includes Android-specific version of RSA_generate_key
96e67f
  - Added LibreSSL support
96e67f
  - Patch that fixes the support for SSL_set_info_callback and adds
96e67f
    SSL_CTX_set_info_callback and SSL_set_state; support for these functions is
96e67f
    necessary to either detect renegotiation or to enforce renegotiation
96e67f
  - Fixed a problem with SSL_set_state not available on some early OpenSSLs
96e67f
  - Removed arbitrary size limits from calls to tcp_read_all in tcpcat() and
96e67f
    http_cat()
96e67f
  - Removed unnecessary Debian_CPANTS.txt from MANIFEST - again
96e67f
68b146
* Wed Jun 11 2014 Paul Howarth <paul@city-fan.org> - 1.64-1
68b146
- Update to 1.64
68b146
  - Test ocsp.t now does not fail if HTTP::Tiny is not installed
68b146
  - Fixed repository in META.yml
68b146
  - Fixed a problem with SSL_get_peer_cert_chain: if the SSL handshake results
68b146
    in an anonymous authentication, like ADH-DES-CBC3-SHA, get_peer_cert_chain
68b146
    will not return an empty list, but instead return the SSL object
68b146
  - Fixed a problem where patch
68b146
    https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=3009244d
68b146
    caused a failed test in t/local/33_x509_create_cert.t
68b146
7fa37f
* Sun Jun  8 2014 Paul Howarth <paul@city-fan.org> - 1.63-3
7fa37f
- Fix failing test with openssl-1.0.1h (upstream commit 414, CPAN RT#96256)
7fa37f
7fa37f
* Sat Jun  7 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.63-2
5d034c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
5d034c
7fa37f
* Mon May 19 2014 Paul Howarth <paul@city-fan.org> - 1.63-1
c7b175
- Update to 1.63
c7b175
  - Improvements to OCSP support: it turns out that some CAs (like Verisign)
c7b175
    sign the OCSP response with the CA we have in the trust store and don't
c7b175
    attach this certifcate in the response, but OpenSSL by itself only
c7b175
    considers the certificates included in the response and
c7b175
    SSL_OCSP_response_verify added the certificates in the chain too, so now
c7b175
    we also add the trusted CA from the store which signed the lowest chain
c7b175
    certificate, at least if we could not verify the OCSP response without
c7b175
    doing it
c7b175
  - Fixed some compiler warnings
c7b175
- BR: perl(HTTP::Tiny) for test suite
c7b175
dc6bbd
* Mon May 12 2014 Paul Howarth <paul@city-fan.org> - 1.61-1
dc6bbd
- Update to 1.61
dc6bbd
  - Fixed a typo in an error message
dc6bbd
  - Fixed a problem with building with openssl that does not support OCSP
dc6bbd
  - Fixed some newly introduced warnings if compiled with -Wall
dc6bbd
  - Fixed format string issue causing build failures
dc6bbd
  - Changed calloc to Newx and free to Safefree, otherwise there might be
dc6bbd
    problems because calloc is done from a different memory pool than free
dc6bbd
    (depends on the build options for perl, but seen on Windows)
dc6bbd
8f84ff
* Sat May 10 2014 Paul Howarth <paul@city-fan.org> - 1.59-1
8f84ff
- Update to 1.59
8f84ff
  - Fixed local/30_error.t so that tests do not fail if diagnostics are enabled
8f84ff
  - Fixed error messages about undefined strings used with length or split
8f84ff
  - Improvements to configuration of OPTIMIZE flags, to prevent overriding of
8f84ff
    perl's expected optimization flags
8f84ff
  - SSL_peek() now returns openssl error code as second item when called in
8f84ff
    array context, same as SSL_read
8f84ff
  - Fixed some warnings
8f84ff
  - Added support for tlsv1.1 tlsv1.2 via $Net::SSLeay::ssl_version
8f84ff
  - Improve examples in 'Using other perl modules based on Net::SSLeay'
8f84ff
  - Added support for OCSP
8f84ff
  - Added missing t/external/ocsp.t
8f84ff
- Add patch to stop gcc complaining about format string usage
8f84ff
32a9e5
* Wed Jan 15 2014 Paul Howarth <paul@city-fan.org> - 1.58-1
32a9e5
- Update to 1.58
32a9e5
  - Always use size_t for strlen() return value
32a9e5
  - t/external/20_cert_chain.t was missing from dist
32a9e5
  - Version number in META.yml was incorrect
32a9e5
  - Improvements to test t/external/20_cert_chain.t to provoke following bug:
32a9e5
    fixed crash due to SSL_get_peer_cert_chain incorrectly free'ing the chain
32a9e5
    after use
32a9e5
  - Fixed a problem when compiling against openssl where OPENSSL_NO_EC is set
32a9e5
- Drop Fedora/EL ECC support patch, no longer needed
32a9e5
bd9552
* Sun Jan 12 2014 Paul Howarth <paul@city-fan.org> - 1.57-1
bd9552
- Update to 1.57
bd9552
  - Fixed remaining problems with test suite: pod coverage and kwalitee tests
bd9552
    are only enabled with RELEASE_TESTING=1
bd9552
85b22b
* Wed Jan  8 2014 Paul Howarth <paul@city-fan.org> - 1.56-1
85b22b
- Update to 1.56
85b22b
  - Fixed a typo in documentation of BEAST Attack
85b22b
  - Added LICENSE file copied from OpenSSL distribution to prevent complaints
85b22b
    from various versions of kwalitee
85b22b
  - Adjusted license: in META.yml to be 'openssl'
85b22b
  - Adds support for the basic operations necessary to support ECDH for PFS,
85b22b
    e.g. EC_KEY_new_by_curve_name, EC_KEY_free and SSL_CTX_set_tmp_ecdh
85b22b
  - Improvements to t/handle/external/50_external.t to handle the case when a
85b22b
    test connection was not possible
85b22b
  - Added support for ALPN TLS extension
85b22b
  - Fixed a use-after-free error
85b22b
  - Fixed a problem with invalid comparison on OBJ_cmp result in
85b22b
    t/local/36_verify.t
85b22b
  - Added support for get_peer_cert_chain()
85b22b
  - Fixed a bug that could cause stack faults: mixed up PUTBACK with SPAGAIN in
85b22b
    ssleay_RSA_generate_key_cb_invoke(); a final PUTBACK is needed here
85b22b
  - Fixed cb->data checks and wrong refcounts on &PL_sv_undef
85b22b
  - Deleted support for SSL_get_tlsa_record_byname: it is not included in
85b22b
    OpenSSL git master
85b22b
- Drop upstreamed patch for CPAN RT#91215
85b22b
- Skip the Pod Coverage test, as there are naked subroutines in this release
85b22b
- ECC support not available in Fedora/EL until OpenSSL 1.0.1e, so patch the
85b22b
  source accordingly to fix builds for F-12 .. F-17
85b22b
a16de5
* Fri Dec  6 2013 Paul Howarth <paul@city-fan.org> - 1.55-6
a16de5
- Fix usage of OBJ_cmp in the test suite (CPAN RT#91215)
a16de5
e02441
* Sun Dec  1 2013 Paul Howarth <paul@city-fan.org> - 1.55-5
e02441
- Drop the kwalitee test for now as it's too fussy for the current code
e02441
6af7ad
* Wed Aug 14 2013 Jitka Plesnikova <jplesnik@redhat.com> - 1.55-4
6af7ad
- Perl 5.18 re-rebuild of bootstrapped packages
6af7ad
bf85e0
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.55-3
bf85e0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
bf85e0
3bc2ca
* Mon Jul 22 2013 Petr Pisar <ppisar@redhat.com> - 1.55-2
3bc2ca
- Perl 5.18 rebuild
3bc2ca
8ed2ca
* Sat Jun  8 2013 Paul Howarth <paul@city-fan.org> - 1.55-1
8ed2ca
- update to 1.55
8ed2ca
  - added support for TLSV1_1 and TLSV1_2 methods with SSL_CTX_tlsv1_1_new(),
8ed2ca
    SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and TLSv1_2_method(), where
8ed2ca
    available in the underlying openssl
8ed2ca
  - added CRL support functions X509_CRL_get_ext(), X509_CRL_get_ext_by_NID(),
8ed2ca
    X509_CRL_get_ext_count()
8ed2ca
  - fixed a problem that could cause content with a value of '0' to be
8ed2ca
    incorrectly encoded by do_httpx3 and friends (CPAN RT#85417)
8ed2ca
  - added support for SSL_get_tlsa_record_byname() required for DANE support in
8ed2ca
    openssl-1.0.2 and later
8ed2ca
  - testing with openssl-1.0.2-stable-SNAP-20130521
8ed2ca
  - added X509_NAME_new and X509_NAME_hash
8ed2ca
d4bac3
* Sat Mar 23 2013 Paul Howarth <paul@city-fan.org> - 1.54-1
d4bac3
- update to 1.54
d4bac3
  - added support for SSL_export_keying_material where present (i.e. in OpenSSL
d4bac3
    1.0.1 and later)
d4bac3
  - changed t/handle/external/50_external.t to use www.airspayce.com instead of
d4bac3
    perldition.org, who no longer have an https server
d4bac3
  - patch to fix a crash: P_X509_get_crl_distribution_points on an X509
d4bac3
    certificate with values in the CDP extension that do not have an ia5 string
d4bac3
    would cause a segmentation fault when accessed
d4bac3
  - change in t/local/32_x509_get_cert_info.t to not use
d4bac3
    Net::SSLeay::ASN1_INTEGER_get, since it works differently on 32 and 64 bit
d4bac3
    platforms
d4bac3
  - updated author and distribution location details to airspayce.com
d4bac3
  - improvement to test 07_sslecho.t so that if set_cert_and_key fails we can
d4bac3
    tell why
d4bac3
72f8e2
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.52-2
d4bac3
- rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
72f8e2
f0bb22
* Wed Jan  9 2013 Paul Howarth <paul@city-fan.org> - 1.52-1
f0bb22
- update to 1.52
f0bb22
  - rebuild package with gnu format tar, to prevent problems with unpacking on
f0bb22
    other systems such as old Solaris
f0bb22
8f32f1
* Fri Dec 14 2012 Paul Howarth <paul@city-fan.org> - 1.51-1
8f32f1
- update to 1.51
8f32f1
  - fixed a problem where SSL_set_SSL_CTX is not available with
8f32f1
    OpenSSL < 0.9.8f (CPAN RT#81940)
989ee0
- fix bogus date in spec changelog
8f32f1
690893
* Thu Dec 13 2012 Paul Howarth <paul@city-fan.org> - 1.50-1
690893
- update to 1.50
690893
  - fixed a problem where t/handle/external/50_external.t would crash if any of
690893
    the test sites were not contactable
690893
  - now builds on VMS, added README.VMS
690893
  - fixed a few compiler warnings in SSLeay.xs; most of them are just
690893
    signed/unsigned pointer mismatches but there is one that actually fixes
690893
    returning what would be an arbitrary value off the stack from
690893
    get_my_thread_id if it happened to be called in a non-threaded build
690893
  - added SSL_set_tlsext_host_name, SSL_get_servername, SSL_get_servername_type,
690893
    SSL_CTX_set_tlsext_servername_callback for server side Server Name
690893
    Indication (SNI) support
690893
  - fixed a problem with C++ comments preventing builds on AIX and HPUX
690893
  - perdition.org not available for tests, changed to www.open.com.au
690893
  - added SSL_FIPS_mode_set
690893
  - improvements to test suite so it succeeds with and without FIPS mode
690893
    enabled
690893
  - added documentation, warning not to pass UTF-8 data in the content
690893
    argument to post_https
690893
f7578e
* Tue Sep 25 2012 Paul Howarth <paul@city-fan.org> - 1.49-1
f7578e
- update to 1.49
f7578e
  - fixed problem where on some platforms test t/local/07_tcpecho.t would bail
f7578e
    out if it could not bind port 1212; it now tries a number of ports to bind
f7578e
    to until successful
f7578e
  - improvements to unsigned casting
f7578e
  - improvements to Net::SSLeay::read to make it easier to use with
f7578e
    non-blocking IO: it modifies Net::SSLeay::read() to return the result from
f7578e
    SSL_read() as the second return value, if Net::SSLeay::read() is called in
f7578e
    list context (its behavior should be unchanged if called in scalar or void
f7578e
    context)
f7578e
  - fixed a problem where t/local/kwalitee.t fails with
f7578e
    Module::CPANTS::Analyse 0.86
f7578e
  - fixed a number of typos
f7578e
  - fixed a compiler warning from Compiling with gcc-4.4 and -Wall
f7578e
  - Fixed problems with get_https4: documentation was wrong, $header_ref was
f7578e
    not correctly set and $server_cert was not returned
f7578e
  - fixed a problem that could cause a Perl exception about no blength method
f7578e
    on undef (CPAN RT#79309)
f7578e
  - added documentation about how to mitigate various SSL/TLS vulnerabilities
f7578e
  - SSL_MODE_* are now available as constants
f7578e
- drop upstreamed pod encoding patch
f7578e
6e9992
* Mon Aug 20 2012 Paul Howarth <paul@city-fan.org> - 1.48-6
6e9992
- fix POD encoding (CPAN RT#78281)
6e9992
- classify buildreqs by usage
6e9992
- BR:/R: perl(XSLoader)
6e9992
a97d30
* Mon Aug 13 2012 Petr Pisar <ppisar@redhat.com> - 1.48-5
6e9992
- specify all dependencies
a97d30
6d45de
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.48-4
6e9992
- rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
6d45de
a7f398
* Tue Jul 10 2012 Petr Pisar <ppisar@redhat.com> - 1.48-3
6e9992
- perl 5.16 re-rebuild of bootstrapped packages
a7f398
13bb68
* Wed Jun 13 2012 Petr Pisar <ppisar@redhat.com> - 1.48-2
6e9992
- perl 5.16 rebuild
13bb68
327192
* Wed Apr 25 2012 Paul Howarth <paul@city-fan.org> - 1.48-1
327192
- update to 1.48
327192
  - removed unneeded Debian_CPANTS.txt from MANIFEST
327192
  - fixed incorrect documentation about the best way to call CTX_set_options
327192
  - fixed problem that caused "Undefined subroutine utf8::encode" in
327192
    t/local/33_x509_create_cert.t (on perl 5.6.2)
6e9992
  - in examples and pod documentation, changed #!/usr/local/bin/perl
6e9992
    to #!/usr/bin/perl
327192
  - t/local/06_tcpecho.t now tries a number of ports to bind to until
327192
    successful
327192
- no longer need to fix shellbangs in examples
327192
21741b
* Thu Apr 19 2012 Paul Howarth <paul@city-fan.org> - 1.47-3
21741b
- simplify Test::Kwalitee conditional
21741b
Marcela Mašláňová e2b536
* Thu Apr 19 2012 Marcela Mašláňová <mmaslano@redhat.com> - 1.47-2
Marcela Mašláňová e2b536
- make module Kwalitee conditional
Marcela Mašláňová e2b536
2bbbe6
* Wed Apr  4 2012 Paul Howarth <paul@city-fan.org> - 1.47-1
2bbbe6
- update to 1.47
2bbbe6
  - fixed overlong lines and spelling errors in pod
2bbbe6
  - fixed extra "garbage" files in 1.46 tarball
2bbbe6
  - fixed incorrect fail reports on some 64 bit platforms
2bbbe6
  - fix to avoid FAIL reports from cpantesters with missing openssl
2bbbe6
  - use my_snprintf from ppport.h to prevent link failures with perl 5.8 and
2bbbe6
    earlier when compiled with MSVC
2bbbe6
4297dd
* Tue Apr  3 2012 Paul Howarth <paul@city-fan.org> - 1.46-1
4297dd
- update to 1.46 (see Changes file for details)
4297dd
- BR: openssl as well as openssl-devel, needed for building
4297dd
- no longer need help to find openssl
4297dd
- upstream no longer shipping TODO
4297dd
- drop %%defattr, redundant since rpm 4.4
4297dd
f27f8d
* Sat Feb 25 2012 Paul Howarth <paul@city-fan.org> - 1.45-1
f27f8d
- update to 1.45 (see Changes file for full details)
f27f8d
  - added thread safety and dynamic locking, which should complete thread
f27f8d
    safety work, making Net::SSLeay completely thread-safe
f27f8d
  - lots of improved documentation
f27f8d
- BR: perl(Test::Pod::Coverage)
f27f8d
- install Net/SSLeay.pod as %%doc
f27f8d
056dde
* Thu Jan 12 2012 Paul Howarth <paul@city-fan.org> - 1.42-2
f27f8d
- use DESTDIR rather than PERL_INSTALL_ROOT
f27f8d
- use %%{_fixperms} macro rather than our own chmod incantation
056dde
- BR: perl(AutoLoader), perl(Exporter), perl(Socket)
056dde
117355
* Mon Oct  3 2011 Paul Howarth <paul@city-fan.org> - 1.42-1
117355
- update to 1.42
117355
  - fixed incorrect documentation of how to enable CRL checking
117355
  - fixed incorrect letter in Sebastien in Credits
117355
  - changed order of the Changes file to be reverse chronological
117355
  - fixed a compile error when building on Windows with MSVC6
117355
- drop UTF8 patch, no longer needed
117355
5af172
* Sun Sep 25 2011 Paul Howarth <paul@city-fan.org> - 1.41-1
5af172
- update to 1.41
5af172
  - fixed incorrect const signatures for 1.0 that were causing warnings; now
5af172
    have clean compile with 0.9.8a through 1.0.0
5af172
- BR: perl(Carp)
5af172
df7ee4
* Fri Sep 23 2011 Paul Howarth <paul@city-fan.org> - 1.40-1
df7ee4
- update to 1.40
df7ee4
  - fixed incorrect argument type in call to SSL_set1_param
df7ee4
  - fixed a number of issues with pointer sizes; removed redundant pointer cast
df7ee4
    tests from t/
df7ee4
  - added Perl version requirements to SSLeay.pm
df7ee4
e9fab8
* Wed Sep 21 2011 Paul Howarth <paul@city-fan.org> - 1.39-1
e9fab8
- update to 1.39
e9fab8
  - downgraded Module::Install to 0.93 since 1.01 was causing problems in the
e9fab8
    Makefile
e9fab8
802475
* Fri Sep 16 2011 Paul Howarth <paul@city-fan.org> - 1.38-1
802475
- update to 1.38
802475
  - fixed a problem with various symbols that only became available in OpenSSL
802475
    0.9.8 such as X509_VERIFY_PARAM and X509_POLICY_NODE, causing build
802475
    failures with older versions of OpenSSL (CPAN RT#71013)
802475
1e2b5d
* Fri Sep 16 2011 Paul Howarth <paul@city-fan.org> - 1.37-1
1e2b5d
- update to 1.37
1e2b5d
  - added X509_get_fingerprint
1e2b5d
  - added support for SSL_CTX_set1_param, SSL_set1_param and selected
1e2b5d
    X509_VERIFY_PARAM_* OBJ_* functions
1e2b5d
  - fixed the prototype for randomize()
1e2b5d
  - fixed an uninitialized value warning in $Net::SSLeay::proxyauth
1e2b5d
  - allow net-ssleay to compile if SSLV2 is not present
1e2b5d
  - fixed a problem where sslcat (and possibly other functions) expect RSA
1e2b5d
    keys and will not load DSA keys for client certificates
1e2b5d
  - removed SSL_CTX_v2_new and SSLv2_method() for OpenSSL 1.0 and later
1e2b5d
  - added CTX_use_PKCS12_file
1e2b5d
- this release by MIKEM => update source URL
1e2b5d
Petr Sabata f38520
* Tue Jul 19 2011 Petr Sabata <contyk@redhat.com> - 1.36-7
Petr Sabata f38520
- Perl mass rebuild
Petr Sabata f38520
e042be
* Thu Jul 14 2011 Paul Howarth <paul@city-fan.org> - 1.36-6
7c6314
- BR: perl(Test::Kwalitee) if we're not bootstrapping
7c6314
- explicitly BR: pkgconfig
74f72a
- use a patch rather than a scripted iconv to fix the character encoding
a3bb1c
- modernize provides filter
48ad40
- stop running the tests in verbose mode
e042be
- nobody else likes macros for commands
e042be
27ce80
* Wed Jul 13 2011 Iain Arnell <iarnell@gmail.com> - 1.36-5
6a58ef
- drop obsolete BRs Array::Compare, Sub::Uplevel, Tree::DAG_Node
6a58ef
cd4e1f
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.36-4
27ce80
- rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
cd4e1f
Marcela Mašláňová 9b5793
* Tue Dec 21 2010 Marcela Maslanova <mmaslano@redhat.com> - 1.36-3
27ce80
- rebuild to fix problems with vendorarch/lib (#661697)
Marcela Mašláňová 9b5793
d265de
* Tue May 04 2010 Marcela Maslanova <mmaslano@redhat.com> - 1.36-2
27ce80
- mass rebuild with perl-5.12.0
d265de
1ff4ce
* Sun Jan 31 2010 Paul Howarth <paul@city-fan.org> - 1.36-1
1ff4ce
- update to 1.36 (see Changes for details)
1ff4ce
- drop svn patches
1ff4ce
7fb48d
* Mon Dec  7 2009 Stepan Kasal <skasal@redhat.com> - 1.35-8
7fb48d
- rebuild against perl 5.10.1
7fb48d
fab18d
* Sat Aug 22 2009 Paul Howarth <paul@city-fan.org> - 1.35-7
fab18d
- update to svn trunk (rev 252), needed due to omission of MD2 functionality
fab18d
  from OpenSSL 1.0.0 (CPAN RT#48916)
fab18d
466906
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 1.35-6
466906
- rebuilt with new openssl
466906
6a3726
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.35-5
fab18d
- rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
6a3726
6a5998
* Sun Mar  8 2009 Paul Howarth <paul@city-fan.org> - 1.35-4
6a5998
- filter out unwanted provides for perl shared objects
6a5998
- run tests in verbose mode
6a5998
c2fa66
* Thu Feb 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.35-3
6a5998
- rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
c2fa66
f52b57
* Sat Jan 17 2009 Tomas Mraz <tmraz@redhat.com> - 1.35-2
f52b57
- rebuild with new openssl
f52b57
4941c9
* Mon Jul 28 2008 Paul Howarth <paul@city-fan.org> - 1.35-1
4941c9
- update to 1.35
4941c9
- drop flag and patch for enabling/disabling external tests - patch now upstream
4941c9
- external hosts patch no longer needed as we don't do external tests
4941c9
- filter out unversioned provide for perl(Net::SSLeay)
4941c9
- use the distro openssl flags rather than guessing them
4941c9
92260f
* Wed Feb 27 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 1.32-5
6a5998
- rebuild for perl 5.10 (again)
92260f
20cf7e
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.32-4
6a5998
- autorebuild for GCC 4.3
20cf7e
feb2b1
* Thu Jan 31 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 1.32-3
feb2b1
- rebuild for new perl
feb2b1
f6165e
* Wed Dec  5 2007 Paul Howarth <paul@city-fan.org> - 1.32-2
f6165e
- rebuild with new openssl
f6165e
ef0a04
* Wed Nov 28 2007 Paul Howarth <paul@city-fan.org> - 1.32-1
ef0a04
- update to 1.32, incorporate new upstream URLs
ef0a04
- cosmetic spec changes suiting new maintainer's preferences
ef0a04
- fix argument order for find with -depth
ef0a04
- remove patch for CVE-2005-0106, fixed upstream in 1.30 (#191351)
ef0a04
  (http://rt.cpan.org/Public/Bug/Display.html?id=19218)
ef0a04
- remove test patch, no longer needed
ef0a04
- re-encode Credits as UTF-8
ef0a04
- include TODO as %%doc
ef0a04
- add buildreqs perl(Array::Compare), perl(MIME::Base64), perl(Sub::Uplevel),
ef0a04
  perl(Test::Exception), perl(Test::NoWarnings), perl(Test::Pod),
ef0a04
  perl(Test::Warn), perl(Tree::DAG_Node)
ef0a04
- add patch needed to disable testsuite non-interactively
ef0a04
- run test suite but disable external tests by default; external tests can be
ef0a04
  enabled by using rpmbuild --with externaltests
ef0a04
- add patch to change hosts connected to in external tests
ef0a04
paragn 8ab436
* Fri Nov 16 2007 Parag Nemade <panemade@gmail.com> - 1.30-7
ef0a04
- Merge Review (#226272) Spec cleanup
paragn 8ab436
1d8b1e
* Tue Nov  6 2007 Stepan Kasal <skasal@redhat.com> - 1.30-6
ef0a04
- fix a typo in description (#231756, #231757)
1d8b1e
e32a7c
* Tue Oct 16 2007 Tom "spot" Callaway <tcallawa@redhat.com> - 1.30-5.1
e32a7c
- correct license tag
e32a7c
- add BR: perl(ExtUtils::MakeMaker)
e32a7c
0a67d9
* Tue Aug 21 2007 Warren Togami <wtogami@redhat.com> - 1.30-5
0a67d9
- rebuild
0a67d9
fa1d7f
* Fri Jul 14 2006 Warren Togami <wtogami@redhat.com> - 1.30-4
fa1d7f
- import into FC6
fa1d7f
fa1d7f
* Tue Feb 28 2006 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.30-3
fa1d7f
- Rebuild for FC5 (perl 5.8.8).
fa1d7f
fa1d7f
* Fri Jan 27 2006 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.30-2
fa1d7f
- CVE-2005-0106: patch from Mandriva
fa1d7f
  http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:023
fa1d7f
fa1d7f
* Sun Jan 15 2006 Ville Skyttä <ville.skytta at iki.fi> - 1.30-1
fa1d7f
- 1.30.
fa1d7f
- Optionally run the test suite during build with "--with tests".
fa1d7f
fa1d7f
* Wed Nov  9 2005 Ville Skyttä <ville.skytta at iki.fi> - 1.26-3
fa1d7f
- Rebuild for new OpenSSL.
fa1d7f
- Cosmetic cleanups.
fa1d7f
989ee0
* Wed Apr  6 2005 Michael Schwendt <mschwendt[AT]users.sf.net> - 1.26-2
fa1d7f
- rebuilt
fa1d7f
fa1d7f
* Mon Dec 20 2004 Ville Skyttä <ville.skytta at iki.fi> - 0:1.26-1
fa1d7f
- Drop fedora.us release prefix and suffix.
fa1d7f
fa1d7f
* Mon Oct 25 2004 Ville Skyttä <ville.skytta at iki.fi> - 0:1.26-0.fdr.2
fa1d7f
- Convert manual page to UTF-8.
fa1d7f
fa1d7f
* Tue Oct 12 2004 Ville Skyttä <ville.skytta at iki.fi> - 0:1.26-0.fdr.1
fa1d7f
- Update to unofficial 1.26 from Peter Behroozi, adds get1_session(),
fa1d7f
  enables session caching with IO::Socket::SSL (bug 1859, bug 1860).
fa1d7f
- Bring outdated test14 up to date (bug 1859, test suite still not enabled).
fa1d7f
fa1d7f
* Sun Jul 11 2004 Ville Skyttä <ville.skytta at iki.fi> - 0:1.25-0.fdr.4
fa1d7f
- Rename to perl-Net-SSLeay, provide perl-Net_SSLeay for compatibility
fa1d7f
  with the rest of the world.
fa1d7f
fa1d7f
* Wed Jul  7 2004 Ville Skyttä <ville.skytta at iki.fi> - 0:1.25-0.fdr.3
fa1d7f
- Bring up to date with current fedora.us Perl spec template.
fa1d7f
- Include examples in docs.
fa1d7f
fa1d7f
* Sun Feb  8 2004 Ville Skyttä <ville.skytta at iki.fi> - 0:1.25-0.fdr.2
fa1d7f
- Reduce directory ownership bloat.
fa1d7f
fa1d7f
* Fri Oct 17 2003 Ville Skyttä <ville.skytta at iki.fi> - 0:1.25-0.fdr.1
fa1d7f
- First build.