Em 18-06-2014 13:23, Daniel de Oliveira Mantovani escreveu:
Alceu,
Eu olhei o código fonte do Crypt-SSLeay-0.64 e não tem nenhum lugar
mesmo para passar o header a lib (OPENSSL_LIB e OPENSSL_INCLUDE).
:(
Acho que de uma forma geral o suporte a SSL do Perl anda meio precário.
http://search.cpan.org/dist/Crypt-SSLeay/SSLeay.pm#DO_YOU_NEED_Crypt::SSLeay?
"Starting with version 6.02 of LWP, https support was unbundled into
LWP::Protocol::https. This module specifies as one of its prerequisites
IO::Socket::SSL which is automatically used by LWP::UserAgent unless
this preference is overridden separately. IO::Socket::SSL is a more
complete implementation, and, crucially, it allows hostname
verification. Crypt::SSLeay does not support this. At this point,
Crypt::SSLeay is maintained to support existing software that already
depends on it. However, it is possible that your software does not
really depend on Crypt::SSLeay, only on the ability of LWP::UserAgent
class to communicate with sites over SSL/TLS."
Vamos ver agora o IO::Socket::SSL:
https://github.com/noxxi/p5-io-socket-ssl/blob/master/Makefile.PL
WriteMakefile(
'NAME' => 'IO::Socket::SSL',
'ABSTRACT' => 'Nearly transparent SSL encapsulation for
IO::Socket::INET.',
'AUTHOR' => 'Steffen Ullrich <[email protected]>, Peter Behroozi,
Marko Asplund',
'LICENSE' => 'perl',
'DISTNAME' => 'IO-Socket-SSL',
'VERSION_FROM' => 'lib/IO/Socket/SSL.pm',
'PREREQ_PM' => {
'Net::SSLeay' => 1.46,
Vamos ver o Net::SSLeay:
http://search.cpan.org/~sampo/Net_SSLeay.pm-1.25/SSLeay.pm#VERSION
"There are currently two perl modules for using OpenSSL C library:
Net::SSLeay (maintaned by me) and SSLeay (maintained by OpenSSL team).
This module is the Net::SSLeay variant.
At the time of making this release, Eric's module was still quite
sketchy and could not be used for real work, thus I felt motivated to
make this maintenance release. This module is not planned to evolve to
contain any further functionality, i.e. I will concentrate on just
making a simple SSL connection over TCP socket. Presumably Eric's own
module will offer full SSLeay API one day.
This module uses OpenSSL-0.9.6c. It does not work with any earlier
version and there is no guarantee that it will work with later versions
either, though as long as C API does not change, it should. This module
requires perl5.005, or 5.6.0 (or better?) though I believe it would
build with any perl5.002 or newer."
E agora a cereja no topo do bolo:
http://blog.nu42.com/2014/04/does-your-code-really-depend-on.html
Esta aí uma sugestão para desenvolvimento financiado pela Perl
Foundation, principalmente depois do "causo" do Heartbleed. :-)
[]'s
Alceu
=begin disclaimer
Sao Paulo Perl Mongers: http://sao-paulo.pm.org/
SaoPaulo-pm mailing list: [email protected]
L<http://mail.pm.org/mailman/listinfo/saopaulo-pm>
=end disclaimer
