commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2019-06-01 09:43:23 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.5148 (New) Package is "perl-Net-SSLeay" Sat Jun 1 09:43:23 2019 rev:31 rq:705653 version:1.88 Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2019-03-13 09:09:57.999419333 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.5148/perl-Net-SSLeay.changes 2019-06-01 09:43:24.807448958 +0200 @@ -1,0 +2,133 @@ +Mon May 27 11:29:57 UTC 2019 - Pedro Monreal Gonzalez + +- Update to 1.88 + 1.88 2019-05-10 +- New stable release incorporating all changes from developer + releases 1.86_01 to 1.86_11. +- From this release, Net-SSLeay is switching to an "odd/even" + developer/stable release version numbering system, like that of + many core modules (e.g. ExtUtils::MakeMaker): developer releases + will have an odd minor version number (and the usual "_xx" suffix), + and stable releases will have an even minor version number. This + means there is no Net-SSLeay 1.87. +- Summary of major changes since version 1.85: + - Mike McCauley has stepped down as maintainer. The new maintainers +are Chris Novakovic, Heikki Vatiainen and Tuure Vartiainen. + - The source code has moved from the now-defunct Debian Subversion +server (alioth.debian.org) to GitHub +(https://github.com/radiator-software/p5-net-ssleay). + - Net-SSLeay is provided under the terms of the Artistic License +2.0 - this has been the case since version 1.66, but references +to other licenses remained in the source code, causing ambiguity. + - Perl 5.8.1 or newer is now required to use Net-SSLeay. This has +already been the case for some time in practice, as the test +suite hasn't fully passed on Perl 5.6 for several years. + - Much-improved compatibility with OpenSSL 1.1.1, and improved +support for TLS 1.3. + - Fixed a long-standing bug in cb_data_advanced_put() that caused +memory leaks when callbacks were frequently added and removed. + - Support in the test suite for "hardened" OpenSSL configurations +that set a default security level of 2 or higher (e.g., in the +OpenSSL packages that ship with recent versions of Debian, Fedora +and Ubuntu). + + 1.86_11 2019-05-08 +- Clarified Net-SSLeay's licensing terms: the module distribution has + been released under the terms of the Artistic License 2.0 since + version 1.66; references to other licenses have been removed. Fixes + RT#106314. Thanks to Kent Fredric for pointing out the ambiguity. +- Replace the HTTPS hosts in the external tests (some of which were + no longer online) with more resilient ones. Closes issue #26. + + 1.86_10 2019-05-04 +- Use locally-generated certificate chain in local tests rather + than the Twitter one, which changes regularly and breaks the + test suite unnecessarily. Fixes RT#129201. Thanks to Petr Písař + for the report and patch, and Steffen Ullrich for an alternative + patch suggestion. +- In t/local/09_ctx_new.t, rather than checking that the functions + (CTX_)get_min_proto_version and (CTX_)get_max_proto_version return + 0x (indicating the lowest and highest versions supported by + libssl respectively, which is not the case if a run-time + configuration is enforcing a different minimum or maximum), just + check whether the returned value is one of those mentioned on the + SSL_CTX_set_min_proto_version(3) man page. Partially fixes + RT#128025. Thanks to Slaven Rezić and Dmytro Zagashev for the + downstream reports. +- Move from 1024-bit keys/certificates to 2048-bit keys/certificates + across the entire test suite. This removes the need to manually + set the security level to 1 in tests that used the old keys, and + fixes large numbers of test failures on modern Linux distributions + that set the minimum OpenSSL security level to 2. Fixes RT#126270 + and the remainder of RT#128025. Thanks to Petr Písař and Slaven + Rezić for the downstream reports. +- In t/local/06_tcpecho.t and t/local/07_sslecho.t, connect to + 127.0.0.1 instead of localhost. This fixes these tests when + executed inside a network sandbox that disrupts the behaviour of + gethostbyname(). Fixes RT#128207.
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2019-03-13 09:09:53 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.28833 (New) Package is "perl-Net-SSLeay" Wed Mar 13 09:09:53 2019 rev:30 rq:681764 version:1.86_07 Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2019-01-24 14:01:44.820165676 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.28833/perl-Net-SSLeay.changes 2019-03-13 09:09:57.999419333 +0100 @@ -1,0 +2,226 @@ +Tue Mar 5 14:04:18 UTC 2019 - Pedro Monreal Gonzalez + +- Update to 1.86_07 + 1.86_07 2018-12-13 +- Net::SSLeay::RSA_generate_key() now prefers using + RSA_generate_key_ex. This avois deprecated RSA_generate_key + and allows removing the only Android specific code in + SSLeay.xs. Fixes RT#127593. Thanks to Rouven Weiler. +- SSL_CTX_get0_param, SSL_CTX_get0_param, + X509_VERIFY_PARAM_set1_host, X509_VERIFY_PARAM_add1_host, + X509_VERIFY_PARAM_set_hostflags, + X509_VERIFY_PARAM_get0_peername, + X509_VERIFY_PARAM_set1_email, X509_VERIFY_PARAM_set1_ip and + X509_VERIFY_PARAM_set1_ip_asc added in 1.83 for OpenSSL + 1.0.2 and later are now available with LibreSSL 2.7.0 and + later. +- get_keyblock_size() now gets the MAC secret size from the + cipher on LibreSSL 2.7.0 and later, rather than reaching + into libssl internals. This effectively takes the OpenSSL + 1.1 code path for LibreSSL 2.7.0 instead of the OpenSSL 1.0 + code path. Thanks to Alexander Bluhm. +- get_client_random and get_server_random now use API + functions supported by LibreSSL 2.7.0 and later. Thanks to + Alexander Bluhm. +- Add X509_check_host(), X509_check_email(), X509_check_ip(), + and X509_check_ip_asc() for LibreSSL 2.5.0 and later. Thanks + to Alexander Bluhm. +- OpenSSL_version() and OpenSSL_version_num() are available + with LibreSSL 2.7.0 and later. Thanks to Alexander Bluhm. +- Use OPENSSL_cleanse() instead of memset(). Fixes + RT#116599. Thanks to A. Sinan Unur. + + 1.86_06 2018-09-29 +- Net::SSLeay::read() and SSL_peek() now check SSL_get_error() + for SSL_ERROR_ZERO_RETURN for return values <= 0 to make + Net::SSLeay::read() behave more like underlying OpenSSL + function SSL_read(). + Convenience function ssl_read_all() now does an automatic + retry when ERROR_WANT_READ or ERROR_WANT_WRITE is returned + with Net::SSLeay::read(). + Convenience function ssl_read_until() now uses + Net::SSLeay::ssl_read_all() instead of + Net::SSLeay::read(). Tests 07_sslecho.t and 36_verify.t were + also updated to use ssl_read_all() and ssl_write_all(). The + tests now also disable TLSv1.3 session tickets and ignore + SIGPIPE to avoid this signal when the client has finished + before server has sent session tickets and called + Net::SSLeay::accept(). + Thanks to Petr Pisar and Sebastian Andrzej Siewior for the + patches (in #RT125218). +- Fix a memory leak in cb_data_advanced_put. Fixes + RT#127131. Noticed, investigated and patched by Paul + Evans. Thanks! +- Enable OpenSSL 1.1.1-pre9 with Travis CI. +- Add SSL_CTX_set_num_tickets, SSL_CTX_get_num_tickets, + SSL_set_num_ticket and SSL_get_num_tickets for controlling + the number of TLSv1.3 session tickets that are issued. Add + tests in 44_sess.t. Parts taken from a larger patch by Petr + Pisar of RedHat. +- Add SSL_CTX_set_ciphersuites and SSL_set_ciphersuites for + configuring the available TLSv1.3 ciphersuites. Add tests in + 43_misc_functions.t and clarify SSL_client_version tests. +- Add SSL_CTX_set_security_level, SSL_CTX_get_security_level, + SSL_set_security_level and SSL_get_security_level. + Add new test file 65_security_level.t. + All courtesy of Damyan Ivanov of Debian project. +- Fix export_keying_material return value check and context + handling. SSL_export_keying_material use_context is now + correctly set to non-zero value when context is an empty + string. This affects values exported with TLSv1.2 and earlier. + Update documentation in NetSSLeay.pod and add tests + in t/local/45_export.t. +- Add RAND_priv_bytes. Add new test file t/local/10_rand.t for + RAND_bytes, RAND_pseudo_bytes, RAND_priv_bytes, RAND_status, +
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2019-01-24 14:01:43 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.28833 (New) Package is "perl-Net-SSLeay" Thu Jan 24 14:01:43 2019 rev:29 rq:666157 version:1.85 Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2018-09-11 17:13:47.515734235 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.28833/perl-Net-SSLeay.changes 2019-01-24 14:01:44.820165676 +0100 @@ -1,0 +2,9 @@ +Mon Jan 14 15:55:27 UTC 2019 - Vítězslav Čížek + +- Expose SSL_CTX_set_post_handshake_auth + * https://github.com/radiator-software/p5-net-ssleay/pull/68 +- add Net-SSLeay-1.85-Expose_SSL_CTX_set_post_handshake_auth.patch +- Fix build on SLE-12 + * apparently %autopatch needs to be followed by an empty line there + +--- New: Net-SSLeay-1.85-Expose_SSL_CTX_set_post_handshake_auth.patch Other differences: -- ++ perl-Net-SSLeay.spec ++ --- /var/tmp/diff_new_pack.YECdsc/_old 2019-01-24 14:01:45.628164755 +0100 +++ /var/tmp/diff_new_pack.YECdsc/_new 2019-01-24 14:01:45.636164746 +0100 @@ -1,7 +1,7 @@ # # spec file for package perl-Net-SSLeay # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -33,6 +33,8 @@ Patch3: Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-.patch # Revert retry in Net::SSLeay::write_partial(), CPAN RT#125218 Patch4: Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-from_write_partial.patch +# PATCH-FIX-UPSTREAM https://github.com/radiator-software/p5-net-ssleay/pull/68 +Patch5: Net-SSLeay-1.85-Expose_SSL_CTX_set_post_handshake_auth.patch BuildRequires: libopenssl-devel BuildRequires: openssl BuildRequires: perl @@ -55,6 +57,7 @@ %prep %setup -q -n %{cpan_name}-%{version} %autopatch -p1 + # replace rest of /usr/local/bin/perl with /usr/bin/perl for f in $(find . -type f -exec grep -l "%{_prefix}/local/bin/perl" {} \; ); do sed -i -e "s@%{_prefix}/local/bin/perl@perl@g" $f ++ Net-SSLeay-1.85-Expose_SSL_CTX_set_post_handshake_auth.patch ++ commit 6a6bcf3d96115a6ef62289838cea418c185d8c88 Author: Paul Howarth Date: Wed Sep 19 09:38:40 2018 +0100 Expose SSL_CTX_set_post_handshake_auth TLS 1.3 removed renegotiation in favor of rekeying and post handshake authentication (PHA). With PHA, a server can request a client certificate from a client at some point after the handshake. The feature is commonly used by HTTP servers for conditional and path specific TLS client auth. For example, a server can decide to require a cert based on HTTP method and/or path. A client must announce support for PHA during the handshake. Apache mod_ssl uses PHA: https://github.com/apache/httpd/blob/trunk/modules/ssl/ssl_engine_kernel.c#L1207 As of OpenSSL ticket https://github.com/openssl/openssl/issues/6933, TLS 1.3 clients no longer send the PHA TLS extension by default. For on-demand auth, PHA extension must be enabled with SSL_CTX_set_post_handshake_auth(), https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_post_handshake_auth.html . This function is needed for the Apache httpd upstream test suite: https://bugzilla.redhat.com/show_bug.cgi?id=1630391 . diff --git a/SSLeay.xs b/SSLeay.xs index a4dcb0a..5777ffc 100644 --- a/SSLeay.xs +++ b/SSLeay.xs @@ -7291,4 +7291,13 @@ SSL_export_keying_material(ssl, outlen, label, p) #endif +#if OPENSSL_VERSION_NUMBER >= 0x1010100fL && !defined(LIBRESSL_VERSION_NUMBER) /* OpenSSL 1.1.1 */ + +void +SSL_CTX_set_post_handshake_auth(s,val) +SSL_CTX * s +int val + +#endif + #define REM_EOF "/* EOF - SSLeay.xs */"
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2018-09-11 17:13:42 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new (New) Package is "perl-Net-SSLeay" Tue Sep 11 17:13:42 2018 rev:28 rq:633282 version:1.85 Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2017-08-29 11:35:59.904571259 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new/perl-Net-SSLeay.changes 2018-09-11 17:13:47.515734235 +0200 @@ -1,0 +2,21 @@ +Tue Sep 4 14:44:25 UTC 2018 - Vítězslav Čížek + +- Add patches to support openssl 1.1.1 from Fedora + * Net-SSLeay-1.85-Avoid-SIGPIPE-in-t-local-36_verify.t.patch + * Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-.patch + * Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-from_write_partial.patch + * Net-SSLeay-1.85-Adapt-to-OpenSSL-1.1.1.patch + +--- +Mon Aug 27 09:35:57 UTC 2018 - tchva...@suse.com + +- Version update to 1.85: + * Removal of many deprecated calls from 1.1.x series + +--- +Mon Aug 27 09:31:53 UTC 2018 - tchva...@suse.com + +- Add dependency over zlib-devel, previously added by openssl devel +- Make sure all tests are run + +--- Old: Net-SSLeay-1.81.tar.gz New: Net-SSLeay-1.85-Adapt-to-OpenSSL-1.1.1.patch Net-SSLeay-1.85-Avoid-SIGPIPE-in-t-local-36_verify.t.patch Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-.patch Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-from_write_partial.patch Net-SSLeay-1.85.tar.gz Other differences: -- ++ perl-Net-SSLeay.spec ++ --- /var/tmp/diff_new_pack.VpLlAN/_old 2018-09-11 17:13:47.947733567 +0200 +++ /var/tmp/diff_new_pack.VpLlAN/_new 2018-09-11 17:13:47.951733561 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Net-SSLeay # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,31 +16,34 @@ # -%bcond_with test - +%define cpan_name Net-SSLeay Name: perl-Net-SSLeay -Version:1.81 +Version:1.85 Release:0 -%define cpan_name Net-SSLeay Summary:Perl extension for using OpenSSL License:Artistic-2.0 Group: Development/Libraries/Perl -Url:http://search.cpan.org/dist/Net-SSLeay/ +URL:http://search.cpan.org/dist/Net-SSLeay/ Source: http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz +# Adapt to OpenSSL 1.1.1, bug RH#1614884, CPAN RT#125218 +Patch0: Net-SSLeay-1.85-Adapt-to-OpenSSL-1.1.1.patch +# Avoid SIGPIPE in t/local/36_verify.t, CPAN RT#125218 +Patch2: Net-SSLeay-1.85-Avoid-SIGPIPE-in-t-local-36_verify.t.patch +# Revert retry in Net::SSLeay::{read,write}(), CPAN RT#125218 +Patch3: Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-.patch +# Revert retry in Net::SSLeay::write_partial(), CPAN RT#125218 +Patch4: Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-from_write_partial.patch BuildRequires: libopenssl-devel BuildRequires: openssl BuildRequires: perl BuildRequires: perl-macros -BuildRoot: %{_tmppath}/%{name}-%{version}-build +BuildRequires: zlib-devel %{perl_requires} -%if %{with test} BuildRequires: perl(Test::Exception) BuildRequires: perl(Test::NoWarnings) BuildRequires: perl(Test::Pod) >= 1.00 BuildRequires: perl(Test::Pod::Coverage) BuildRequires: perl(Test::Warn) -%endif -# %description Net::SSLeay module contains perl bindings to openssl (http://www.openssl.org) library. @@ -51,9 +54,10 @@ %prep %setup -q -n %{cpan_name}-%{version} +%autopatch -p1 # replace rest of /usr/local/bin/perl with /usr/bin/perl -for f in $(find . -type f -exec grep -l "/usr/local/bin/perl" {} \; ); do - sed -i -e "s@/usr/local/bin/perl@perl@g" $f +for f in $(find . -type f -exec grep -l "%{_prefix}/local/bin/perl" {} \; ); do + sed -i -e "s@%{_prefix}/local/bin/perl@perl@g" $f done # delete .orig files created by patches find . -type f -name "*.orig" -delete @@ -68,7 +72,7 @@ %check %if ! 0%{?qemu_user_space_build} -make test +make %{?_smp_mflags} test %endif %install @@ -76,11 +80,8 @@ %perl_process_packlist %perl_gen_filelist -%clean -rm -rf %{buildroot} - %files -f
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2017-08-29 11:35:58 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new (New) Package is "perl-Net-SSLeay" Tue Aug 29 11:35:58 2017 rev:27 rq:517887 version:1.81 Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2015-07-05 17:53:53.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new/perl-Net-SSLeay.changes 2017-08-29 11:35:59.904571259 +0200 @@ -1,0 +2,13 @@ +Mon Aug 21 09:18:18 UTC 2017 - vci...@suse.com + +- Fix license as requested by licensedigger in + https://build.opensuse.org/request/show/501145 + +--- +Mon Jun 5 10:48:38 UTC 2017 - vci...@suse.com + +- update to the latest upstream version 1.81 + * introduces compatibility with openssl 1.1.x +- drop net-ssleay-no-ofb.patch (not needed anymore) + +--- Old: Net-SSLeay-1.69.tar.gz net-ssleay-no-ofb.patch New: Net-SSLeay-1.81.tar.gz Other differences: -- ++ perl-Net-SSLeay.spec ++ --- /var/tmp/diff_new_pack.oBptea/_old 2017-08-29 11:36:01.040411670 +0200 +++ /var/tmp/diff_new_pack.oBptea/_new 2017-08-29 11:36:01.048410546 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Net-SSLeay # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,18 +19,16 @@ %bcond_with test Name: perl-Net-SSLeay -Version:1.69 +Version:1.81 Release:0 %define cpan_name Net-SSLeay Summary:Perl extension for using OpenSSL -License:OpenSSL +License:Artistic-2.0 Group: Development/Libraries/Perl Url:http://search.cpan.org/dist/Net-SSLeay/ Source: http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz -# Broken by 1.0.2c openssl update ... probably an openssl bug. -Marcus -Patch0: net-ssleay-no-ofb.patch +BuildRequires: libopenssl-devel BuildRequires: openssl -BuildRequires: openssl-devel BuildRequires: perl BuildRequires: perl-macros BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -53,7 +51,6 @@ %prep %setup -q -n %{cpan_name}-%{version} -%patch0 -p1 # replace rest of /usr/local/bin/perl with /usr/bin/perl for f in $(find . -type f -exec grep -l "/usr/local/bin/perl" {} \; ); do sed -i -e "s@/usr/local/bin/perl@perl@g" $f @@ -84,6 +81,6 @@ %files -f %{name}.files %defattr(-,root,root,-) -%doc Changes Credits QuickRef README examples +%doc Changes Credits LICENSE QuickRef README examples %changelog ++ Net-SSLeay-1.69.tar.gz -> Net-SSLeay-1.81.tar.gz ++ 2625 lines of diff (skipped)
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2015-07-05 17:53:52 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new (New) Package is perl-Net-SSLeay Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2015-04-10 09:48:51.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new/perl-Net-SSLeay.changes 2015-07-05 17:53:53.0 +0200 @@ -1,0 +2,18 @@ +Wed Jun 24 08:05:15 UTC 2015 - meiss...@suse.com + +- net-ssleay-no-ofb.patch: disable the OFB cipher, not exported by + our openssl 1.0.2 currently. + +--- +Tue Jun 23 09:33:48 UTC 2015 - zai...@opensuse.org + +- Update to version 1.69: + + Testing with OpenSSL 1.0.2, 1.0.2a. OK. + + Completed LibreSSL compatibility. + + Improved compatibility with OpenSSL 1.0.2a. + + Added the X509_check_* functions introduced in OpenSSL 1.0.2. + + Added support for X509_V_FLAG_TRUSTED_FIRST constant. Patch +allows get_keyblock_size to work correctly with OpenSSL 1.0.1 +and later versions. + +--- Old: Net-SSLeay-1.68.tar.gz New: Net-SSLeay-1.69.tar.gz net-ssleay-no-ofb.patch Other differences: -- ++ perl-Net-SSLeay.spec ++ --- /var/tmp/diff_new_pack.6jLO58/_old 2015-07-05 17:53:54.0 +0200 +++ /var/tmp/diff_new_pack.6jLO58/_new 2015-07-05 17:53:54.0 +0200 @@ -19,7 +19,7 @@ %bcond_with test Name: perl-Net-SSLeay -Version:1.68 +Version:1.69 Release:0 %define cpan_name Net-SSLeay Summary:Perl extension for using OpenSSL @@ -27,6 +27,8 @@ Group: Development/Libraries/Perl Url:http://search.cpan.org/dist/Net-SSLeay/ Source: http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz +# Broken by 1.0.2c openssl update ... probably an openssl bug. -Marcus +Patch0: net-ssleay-no-ofb.patch BuildRequires: openssl BuildRequires: openssl-devel BuildRequires: perl @@ -51,6 +53,7 @@ %prep %setup -q -n %{cpan_name}-%{version} +%patch0 -p1 # replace rest of /usr/local/bin/perl with /usr/bin/perl for f in $(find . -type f -exec grep -l /usr/local/bin/perl {} \; ); do sed -i -e s@/usr/local/bin/perl@perl@g $f ++ Net-SSLeay-1.68.tar.gz - Net-SSLeay-1.69.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Net-SSLeay-1.68/Changes new/Net-SSLeay-1.69/Changes --- old/Net-SSLeay-1.68/Changes 2015-01-24 01:23:18.0 +0100 +++ new/Net-SSLeay-1.69/Changes 2015-06-03 23:44:05.0 +0200 @@ -1,5 +1,16 @@ Revision history for Perl extension Net::SSLeay. +1.69 2015-06-04 + Testing with OpenSSL 1.0.2, 1.0.2a. OK. + Completed LibreSSL compatibility with the kind assistance of Alexander + Bluhm. + Improved compatibility with OpenSSL 1.0.2a as suggested by Petr Pisar. + Added the X509_check_* functions introduced in OpenSSL 1.0.2, contributed + by Carsten Gaebler. + Added support for X509_V_FLAG_TRUSTED_FIRST constant, patch from Gisle Aas. + Patch allows get_keyblock_size to work correctly with + OpenSSL 1.0.1 and later versions. Contributed by Heikki Vatiainen. + 1.68 2015-01-24 Fixed a problem on OSX when macports openssl 1.x is installed: headers from macport were found but older OSX openssl libraries were linked, resulting diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Net-SSLeay-1.68/README new/Net-SSLeay-1.69/README --- old/Net-SSLeay-1.68/README 2014-08-21 03:08:37.0 +0200 +++ new/Net-SSLeay-1.69/README 2015-02-14 22:57:30.0 +0100 @@ -1,5 +1,5 @@ README - Net::SSLeay Perl module for using OpenSSL -$Id: README 426 2014-08-21 01:08:36Z mikem-guest $ +$Id: README 435 2015-02-14 21:57:30Z mikem-guest $ By popular demand... @@ -9,14 +9,14 @@ Prerequisites - -perl-5.6.1 -though anything starting from perl5.003 probably works. -OpenSSL-0.9.6j or OpenSSL-0.9.7b -(try http://www.openssl.org/) - -This release has been tested with 0.9.6d and - in historical light it seems likely that future versions - will work as well (if major version number changes all bets - are off, though) +perl-5.6.1 though anything starting from perl5.003 probably works. + +OpenSSL-0.9.6j through to at least OpenSSL-1.0.2 and probably later + http://www.openssl.org/ - On Linux, you
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2014-06-18 07:47:46 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new (New) Package is perl-Net-SSLeay Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2014-02-12 17:32:10.0 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new/perl-Net-SSLeay.changes 2014-06-18 07:47:52.0 +0200 @@ -1,0 +2,71 @@ +Thu Jun 12 14:38:14 UTC 2014 - meiss...@suse.com + +- updated to 1.64 + + Fixes for test ocsp.t. Test now does not fail if HTTP::Tiny is not + installed. + Fixed repository in META.yml. + Fixed a problem with SSL_get_peer_cert_chain: if the SSL handshake + results in an anonymous authentication, like ADH-DES-CBC3-SHA, + get_peer_cert_chain will not return an empty list, but instead return the + SSL object. Reported and fixed by Steffen + Ullrich. Thanks. + Fixed a problem where patch + https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=3009244da47b989c4cc59ba02cf81a4e9d8f8431 + caused a failed test in t/local/33_x509_create_cert.t. + +--- +Fri Jun 6 13:44:06 UTC 2014 - co...@suse.com + +- updated to 1.63 + 1.63 2014-05-19 + Fixed error in version number in META.yml + + 1.62 2014-05-19 + Improvements to OCSP support: It turns out that some CA (like Verisign) + sign the OCSP response with the CA we have in the trust store and don't + attach this certifcate in the response. But OpenSSL by itself only + considers the certificates included in the response and + SSL_OCSP_response_verify added the certificates in the chain too. + Now, we also add the trusted CA from the store which + signed the lowest chain certificate, at least if we could not verify the + OCSP response without doing it. Patch from Steffen + Ullrich. Thanks. + Fixed some compiler warnings. + + 1.61 2014-05-12 + Changes calloc to Newx and free to Safefree, otherwise there might be + problems because calloc is done from a different memory pool than free (depends + on the build options for perl, but seen on Windows). Patch from Steffen + Ullrich. Thanks. + + + 1.60 2014-05-10 + Fixed a typo in an error message. Patch from gregor herrmann. Thanks. + Fixed a problem with building with openssl that does not support + OCSP. Also fixed some newly introduced warnings + if compiled with -Wall. Patch from Steffen Ullrich. Thanks. + fix build-failure on most Debian architectures: + SSLeay.xs: In function 'XS_Net__SSLeay_OCSP_response_results': + SSLeay.xs:5602:3: error: format not a string literal and no format + arguments. Patch from gregor herrmann. + + + 1.59 2014-05-10 + Fixed local/30_error.t, so that tests do not fail if diagnostics are + enabled. + Fixed error messages about undefined strings used with length or + split. Reported and patched by Peter Heuchert. + Improvements to configuration of OPTIMIZE flags, to prevent overriding + of perls expected optimization flags. Caution: HPUX aCC optimize options are special. + SSL_peek() now returns openssl error code as second item when called in + array context, same as SSL_read. Patch from Andreas Mohr. + Fixed some warnings. + Added support for tlsv1.1 tlsv1.2 via $Net::SSLeay::ssl_version. Patch + from Andreas Mohr. + Improve examples in 'Using other perl modules based on + Net::SSLeay'. Patched by Andreas Mohr. + Added support for OCSP. Patched by Steffen Ullrich. Thanks! + Added missing t/external/ocsp.t + +--- Old: Net-SSLeay-1.58.tar.gz New: Net-SSLeay-1.64.tar.gz Other differences: -- ++ perl-Net-SSLeay.spec ++ --- /var/tmp/diff_new_pack.cQkjrD/_old 2014-06-18 07:47:53.0 +0200 +++ /var/tmp/diff_new_pack.cQkjrD/_new 2014-06-18 07:47:53.0 +0200 @@ -19,7 +19,7 @@ %bcond_with test Name: perl-Net-SSLeay -Version:1.58 +Version:1.64 Release:0 %define cpan_name Net-SSLeay Summary:Perl extension for using OpenSSL ++ Net-SSLeay-1.58.tar.gz - Net-SSLeay-1.64.tar.gz ++ 2116 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2014-02-12 17:32:09 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new (New) Package is perl-Net-SSLeay Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2013-10-04 10:43:57.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new/perl-Net-SSLeay.changes 2014-02-12 17:32:10.0 +0100 @@ -1,0 +2,41 @@ +Sun Feb 9 13:34:34 UTC 2014 - co...@suse.com + +- updated to 1.58 + Always use size_t for strlen() return value, requested by Alexander Bluhm. + t/external/20_cert_chain.t was missing from dist. + Version number in META.yml was incorrect + Improvements to test t/external/20_cert_chain.t to provoke following bug: + Fixed crash due to SSL_get_peer_cert_chain incorrectly free'ing the chain + after use. + Fixed a problem when compiling against openssl where OPENSSL_NO_EC is set. + + 1.57 2014-01-09 + Fixed remaining problems with test suite: pod coverage and kwalitee tests + are only enabled with RELEASE_TESTING=1 + + 1.56 2014-01-08 + Fixed a typo in documentation of BEAST Attack, patched by gregor + herrmann. + Added LICENSE file copied form OpenSSL distribution to prevent complaints + from various versions of kwalitee. + Adjusted license: in META.yml to be 'openssl' + Adds support for the basic operations necessary to support ECDH for PFS, + e.g. EC_KEY_new_by_curve_name, EC_KEY_free and SSL_CTX_set_tmp_ecdh. + Improvements to t/handle/external/50_external.t to handle the case when a + test connection was not possible. Patched by Alexandr Ciornii. + Added support for ALPN TLS extension. Patch from Lubomir Rintel. Tested + with openssl-1.0.2-stable-SNAP-20131205. + Fix an use-after-free error. Patch from Lubomir Rintel. + Fixed a problem with Invalid comparison on OBJ_cmp result in + t/local/36_verify.t. Contributed by paul. + Added support for get_peer_cert_chain(). Patch by Markus Benning. + Fixed a bug that could cause stack faults: mixed up PUTBACK with SPAGAIN in ssleay_RSA_generate_key_cb_invoke() + a final PUTBACK is needed here. A second issue is also fixed: + cb-data defaults to PL_sv_undef but throught the code you do not check + against PL_sv_undef, just NULL. + To avoid passing the 3rd optional arg at all, do not create it. This fixes all the + cb-data checks and wrong refcounts on PL_sv_undef. Patched by Reini Urban. + Deleted support for SSL_get_tlsa_record_byname: it is not included in + OpenSSL git master. + +--- Old: Net-SSLeay-1.55.tar.gz New: Net-SSLeay-1.58.tar.gz Other differences: -- ++ perl-Net-SSLeay.spec ++ --- /var/tmp/diff_new_pack.n4joN7/_old 2014-02-12 17:32:11.0 +0100 +++ /var/tmp/diff_new_pack.n4joN7/_new 2014-02-12 17:32:11.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package perl-Net-SSLeay # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ %bcond_with test Name: perl-Net-SSLeay -Version:1.55 +Version:1.58 Release:0 %define cpan_name Net-SSLeay Summary:Perl extension for using OpenSSL ++ Net-SSLeay-1.55.tar.gz - Net-SSLeay-1.58.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Net-SSLeay-1.55/Changes new/Net-SSLeay-1.58/Changes --- old/Net-SSLeay-1.55/Changes 2013-06-08 00:26:50.0 +0200 +++ new/Net-SSLeay-1.58/Changes 2014-01-15 00:26:07.0 +0100 @@ -1,5 +1,43 @@ Revision history for Perl extension Net::SSLeay. +1.58 2014-01-15 + Always use size_t for strlen() return value, requested by Alexander Bluhm. + t/external/20_cert_chain.t was missing from dist. + Version number in META.yml was incorrect + Improvements to test t/external/20_cert_chain.t to provoke following bug: + Fixed crash due to SSL_get_peer_cert_chain incorrectly free'ing the chain + after use. + Fixed a problem when compiling against openssl where OPENSSL_NO_EC is set. + +1.57 2014-01-09 + Fixed remaining problems with test suite: pod coverage and kwalitee tests + are only enabled with RELEASE_TESTING=1 + +1.56 2014-01-08 + Fixed a typo in
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2013-10-04 10:43:56 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new (New) Package is perl-Net-SSLeay Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2013-07-09 20:55:43.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new/perl-Net-SSLeay.changes 2013-10-04 10:43:57.0 +0200 @@ -1,0 +2,5 @@ +Wed Oct 2 20:26:56 UTC 2013 - dmuel...@suse.com + +- disable checks on qemu user build (hangs) + +--- Other differences: -- ++ perl-Net-SSLeay.spec ++ --- /var/tmp/diff_new_pack.RACpfe/_old 2013-10-04 10:43:57.0 +0200 +++ /var/tmp/diff_new_pack.RACpfe/_new 2013-10-04 10:43:57.0 +0200 @@ -65,7 +65,9 @@ make %{?_smp_mflags} %check +%if ! 0%{?qemu_user_space_build} make test +%endif %install %perl_make_install -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2013-07-09 20:55:42 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new (New) Package is perl-Net-SSLeay Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2012-06-15 16:31:34.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new/perl-Net-SSLeay.changes 2013-07-09 20:55:43.0 +0200 @@ -1,0 +2,36 @@ +Wed Jul 3 09:13:30 UTC 2013 - lnus...@suse.de + +- new version 1.55 + * Added support for TLSV1_1 and TLSV1_2 methods with +SSL_CTX_tlsv1_1_new(), SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and +TLSv1_2_method(), where available in the underlying openssl. + * Added CRL support functions X509_CRL_get_ext(), +X509_CRL_get_ext_by_NID(), X509_CRL_get_ext_count(). Patch from +Franck Youssef. + * Added support for SSL_get_tlsa_record_byname() required for DANE +support in openssl*1.0.2 and later. SSL_get_tlsa_record_byname() +was added to OpenSSL with the financial assistance of .SE. + * Added X509_NAME_new and X509_NAME_hash, patched by Franck Youssef. + * Added support for SSL_export_keying_material where present + * Net::SSLeay::ASN1_INTEGER_get, since it works differntly on 32 and +64 bit platforms. Updated author and distribution location details +to airspayce.com + * Fixed a few compiler warnings in SSLeay.xs. Most of them are just +signed/unsigned pointer mismatches but there is one that actually +fixes returning what would be an arbitrary value off the stack +from get_my_thread_id if it happened to be called in a +non*threaded build. + * Added SSL_set_tlsext_host_name, SSL_get_servername, +SSL_get_servername_type, SSL_CTX_set_tlsext_servername_callback +for server side Server Name Indication (SNI) support. Patched by +kmx. + * Improvements to Net::SSLeay::read to make it easier to use with +non*blocking IO Added documentation about how to mitigatxe various +SSL/TLS vulnerabilities. + * initializes the SSL library at most once. + * Patch from kmx to protect SSLeay_add_ssl_algorithms from multiple +loads and reentrancy in multi*threaded perls. +- remove perl-Net-SSLeay-1.36.diff: no obvious nor documented justification +- remove perl-Net-SSLeay-1.36-undefined.diff: no longer applies + +--- Old: Net-SSLeay-1.42.tar.gz perl-Net-SSLeay-1.36-undefined.diff perl-Net-SSLeay-1.36.diff New: Net-SSLeay-1.55.tar.gz Other differences: -- ++ perl-Net-SSLeay.spec ++ --- /var/tmp/diff_new_pack.dxHp4N/_old 2013-07-09 20:55:44.0 +0200 +++ /var/tmp/diff_new_pack.dxHp4N/_new 2013-07-09 20:55:44.0 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-Net-SSLeay # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,17 +19,14 @@ %bcond_with test Name: perl-Net-SSLeay -Version:1.42 +Version:1.55 Release:0 -License:OpenSSL %define cpan_name Net-SSLeay Summary:Perl extension for using OpenSSL -Url:http://search.cpan.org/dist/Net-SSLeay/ +License:OpenSSL Group: Development/Libraries/Perl -#Source: http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz -Source: %{cpan_name}-%{version}.tar.gz -Patch0: perl-Net-SSLeay-1.36.diff -Patch1: perl-Net-SSLeay-1.36-undefined.diff +Url:http://search.cpan.org/dist/Net-SSLeay/ +Source: http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz BuildRequires: openssl BuildRequires: openssl-devel BuildRequires: perl @@ -52,8 +49,6 @@ %prep %setup -q -n %{cpan_name}-%{version} -%patch0 -%patch1 # replace rest of /usr/local/bin/perl with /usr/bin/perl for f in $(find . -type f -exec grep -l /usr/local/bin/perl {} \; ); do sed -i -e s@/usr/local/bin/perl@perl@g $f @@ -82,6 +77,6 @@ %files -f %{name}.files %defattr(-,root,root,-) -%doc Changes Credits QuickRef README TODO examples +%doc Changes Credits QuickRef README examples %changelog ++ Net-SSLeay-1.42.tar.gz - Net-SSLeay-1.55.tar.gz ++ 34438 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2012-06-15 15:41:50 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new (New) Package is perl-Net-SSLeay, Maintainer is dlova...@suse.com Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2012-02-17 12:08:08.0 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new/perl-Net-SSLeay.changes 2012-06-15 16:31:34.0 +0200 @@ -1,0 +2,6 @@ +Thu Jun 14 09:28:09 UTC 2012 - cfarr...@suse.com + +- license update: OpenSSL + + +--- Other differences: -- ++ perl-Net-SSLeay.spec ++ --- /var/tmp/diff_new_pack.qRxsPh/_old 2012-06-15 16:31:35.0 +0200 +++ /var/tmp/diff_new_pack.qRxsPh/_new 2012-06-15 16:31:35.0 +0200 @@ -21,7 +21,7 @@ Name: perl-Net-SSLeay Version:1.42 Release:0 -License:OpenSSL License, Original SSLeay License +License:OpenSSL %define cpan_name Net-SSLeay Summary:Perl extension for using OpenSSL Url:http://search.cpan.org/dist/Net-SSLeay/ -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit perl-Net-SSLeay for openSUSE:Factory
Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2012-02-17 12:08:02 Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new (New) Package is perl-Net-SSLeay, Maintainer is vci...@suse.com Changes: --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2011-09-23 12:38:20.0 +0200 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new/perl-Net-SSLeay.changes 2012-02-17 12:08:08.0 +0100 @@ -1,0 +2,47 @@ +Wed Feb 8 15:53:50 UTC 2012 - vci...@suse.com + +- update to 1.42 +Fixed incorrect documentation of how to enable CRL checking. Patched +by Steffen_Ullrich. +Fixed incorrect letter in Sebastien in Credits. Patch by Neil Bowers. +Reversed order of the Changes file to be reverse chronological. Patch by +Neil Bowers. +Fixed a a compile error when building on Windows with MSVC6. reported and +patched by Andrew J. Savige via RT. +1.412011-09-25 +Fixed incorrect const signatures for 1.0 that were causing warnings. +Patches provided by Douglas +Christopher Wilson via RT. Now have clean compile with 0.9.8a through 1.0.0. +1.402011-09-23 +Fixed incorrect argument type in call to SSL_set1_param +Fixed a number of issues with pointer sizes, patched by Douglas +Christopher Wilson via RT. Removed redundant pointer cast tests from t/ +Added Perl version requirements to SSLeay.pm +1.392011-09-21 +Downgraded Module::Install to 0.93 since 1.01 was causing problems in +the Makefile. Reported by Albert Chin. +1.382011-09-16 +- Fixed a problem with various symbols that only became +available in OpenSSL 0.9.8 such as X509_VERIFY_PARAM and +X509_POLICY_NODE, causing build failures with older versions of +OpenSSL. Patched by paul. +1.372011-09-16 +- Added X509_get_fingerprint, contributed by Thierry Walrant (with +minor changes die to the fact that stricmp is not avialable. Cert +types must be lowercase. Also added test to 07_sslecho.t +- Added suport for SSL_CTX_set1_param, SSL_set1_param, +selected X509_VERIFY_PARAM_* OBJ_* functions. Added new test +t/local/36_verify.t +- Fixed the prototype for randomize(), it missed one arg, and errors +are reported with perl 5.10.1 on Windows +- Fixed an uninitialized value warning in $Net::SSLeay::proxyauth, +reported by Andrey Rikov. +- Update so net-ssleay will compile if SSLV2 is not present. Patch +from Chris Butler. +- Fixed a problem where sslcat (and possibly other functions) expect RSA keys and will not +load DSA keys for client certificates. Reported and patched by Jesse +DeFer via RT +- Removed SSL_CTX_v2_new and SSLv2_method() for OpenSSL 1.0 and later. +- Added CTX_use_PKCS12_file contributed by Andrew A. Budkin. + +--- Old: Net-SSLeay-1.36.tar.bz2 New: Net-SSLeay-1.42.tar.gz Other differences: -- ++ perl-Net-SSLeay.spec ++ --- /var/tmp/diff_new_pack.KFqCxY/_old 2012-02-17 12:08:09.0 +0100 +++ /var/tmp/diff_new_pack.KFqCxY/_new 2012-02-17 12:08:09.0 +0100 @@ -1,7 +1,7 @@ # -# spec file for package perl-Net-SSLeay (Version 1.36) +# spec file for package perl-Net-SSLeay # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -15,33 +15,33 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # -# norootforbuild %bcond_with test Name: perl-Net-SSLeay +Version:1.42 +Release:0 +License:OpenSSL License, Original SSLeay License %define cpan_name Net-SSLeay Summary:Perl extension for using OpenSSL -Version:1.36 -Release:7 -License:OpenSSL License, Original SSLeay License -Group: Development/Libraries/Perl Url:http://search.cpan.org/dist/Net-SSLeay/ +Group: Development/Libraries/Perl #Source: http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz -Source: %{cpan_name}-%{version}.tar.bz2 -Patch0: %{name}-%{version}.diff -Patch1: %{name}-%{version}-undefined.diff -BuildRoot: %{_tmppath}/%{name}-%{version}-build -%{perl_requires} -BuildRequires: openssl openssl-devel +Source: %{cpan_name}-%{version}.tar.gz +Patch0: perl-Net-SSLeay-1.36.diff +Patch1: