Path to this page:
Subject: CVS commit: [pkgsrc-2010Q3] pkgsrc/security/p5-IO-Socket-SSL
From: Matthias Scheler
Date: 2010-12-12 19:04:03
Message id: 20101212180403.B1183175DD@cvs.netbsd.org
Log Message:
Pullup ticket #3305 - requested by spz
security/p5-IO-Socket-SSL: security updated
Revisions pulled up:
- security/p5-IO-Socket-SSL/Makefile 1.53-1.54
- security/p5-IO-Socket-SSL/distinfo 1.38-1.39
---
Module Name: pkgsrc
Committed By: wiz
Date: Thu Dec 2 12:25:05 UTC 2010
Modified Files:
pkgsrc/security/p5-IO-Socket-SSL: Makefile distinfo
Log Message:
Update to 1.34:
v1.34 2010.11.01
- schema http for certificate verification changed to
wildcards_in_cn=1, because according to rfc2818 this is valid and
also seen in the wild
- if upgrading socket from inet to ssl fails due to handshake problems
the socket gets downgraded, but is still open.
See https://rt.cpan.org/Ticket/Display.html?id=61466
- deprecate kill_socket, just use close()
---
Module Name: pkgsrc
Committed By: gls
Date: Tue Dec 7 20:15:01 UTC 2010
Modified Files:
pkgsrc/security/p5-IO-Socket-SSL: Makefile distinfo
Log Message:
Update security/p5-IO-Socket-SSL to 1.35
Security fix
v1.35 2010.12.06
- if verify_mode is not VERIFY_NONE and the ca_file/ca_path cannot be
verified as valid it will no longer fall back to VERIFY_NONE but throw
an error. Thanks to Salvatore Bonaccorso and Daniel Kahn Gillmor for
pointing out the problem, see also
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606058
Files: