Path to this page:
Next | Query returned 1 messages, browsing 1 to 10 | previous
CVS Commit History:
2010-12-12 19:04:03 by Matthias Scheler | Files touched by this commit (2) | |
Log message:
Pullup ticket #3305 - requested by spz
security/p5-IO-Socket-SSL: security updated
Revisions pulled up:
- security/p5-IO-Socket-SSL/Makefile 1.53-1.54
- security/p5-IO-Socket-SSL/distinfo 1.38-1.39
---
Module Name: pkgsrc
Committed By: wiz
Date: Thu Dec 2 12:25:05 UTC 2010
Modified Files:
pkgsrc/security/p5-IO-Socket-SSL: Makefile distinfo
Log message:
Update to 1.34:
v1.34 2010.11.01
- schema http for certificate verification changed to
wildcards_in_cn=1, because according to rfc2818 this is valid and
also seen in the wild
- if upgrading socket from inet to ssl fails due to handshake problems
the socket gets downgraded, but is still open.
See https://rt.cpan.org/Ticket/Display.html?id=61466
- deprecate kill_socket, just use close()
---
Module Name: pkgsrc
Committed By: gls
Date: Tue Dec 7 20:15:01 UTC 2010
Modified Files:
pkgsrc/security/p5-IO-Socket-SSL: Makefile distinfo
Log message:
Update security/p5-IO-Socket-SSL to 1.35
Security fix
v1.35 2010.12.06
- if verify_mode is not VERIFY_NONE and the ca_file/ca_path cannot be
verified as valid it will no longer fall back to VERIFY_NONE but throw
an error. Thanks to Salvatore Bonaccorso and Daniel Kahn Gillmor for
pointing out the problem, see also
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606058
|
Next | Query returned 1 messages, browsing 1 to 10 | previous