./security/p5-IO-Socket-SSL, Perl5 SSL socket interface class

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2010Q3, Version: 1.35, Package name: p5-IO-Socket-SSL-1.35, Maintainer: pkgsrc-users

IO::Socket::SSL is a class implementing an object-oriented interface
to SSL sockets. The class is a descendent of IO::Socket::INET and
provides a subset of the base class's interface methods as well as
SSL-specific methods.


Required to run:
[net/p5-IO-Socket-INET6] [net/p5-Net-LibIDN] [security/p5-Net-SSLeay] [lang/perl5]

Master sites: (Expand)

SHA1: 26b6610844aac2835b02373216ffdd95015ac991
RMD160: c5cb876eec3edf1d25c25e6f4a11291ba87445c4
Filesize: 66.003 KB

Version history: (Expand)

CVS history: (Expand)


   2010-12-12 19:04:03 by Matthias Scheler | Files touched by this commit (2) | Package updated
Log message:
Pullup ticket #3305 - requested by spz
security/p5-IO-Socket-SSL: security updated

Revisions pulled up:
- security/p5-IO-Socket-SSL/Makefile		1.53-1.54
- security/p5-IO-Socket-SSL/distinfo		1.38-1.39
---
Module Name:	pkgsrc
Committed By:	wiz
Date:		Thu Dec	 2 12:25:05 UTC 2010

Modified Files:
	pkgsrc/security/p5-IO-Socket-SSL: Makefile distinfo

Log message:
Update to 1.34:

v1.34 2010.11.01
- schema http for certificate verification changed to
  wildcards_in_cn=1, because according to rfc2818 this is valid and
  also seen in the wild
- if upgrading socket from inet to ssl fails due to handshake problems
  the socket gets downgraded, but is still open.
  See https://rt.cpan.org/Ticket/Display.html?id=61466
- deprecate kill_socket, just use close()
---
Module Name:	pkgsrc
Committed By:	gls
Date:		Tue Dec	 7 20:15:01 UTC 2010

Modified Files:
	pkgsrc/security/p5-IO-Socket-SSL: Makefile distinfo

Log message:
Update security/p5-IO-Socket-SSL to 1.35

Security fix

v1.35 2010.12.06
- if verify_mode is not VERIFY_NONE and the ca_file/ca_path cannot be
verified as valid it will no longer fall back to VERIFY_NONE but throw
an error. Thanks to Salvatore Bonaccorso and Daniel Kahn Gillmor for
pointing out the problem, see also
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606058