[libio-socket-ssl-perl] branch master updated (214571f - 9cee8ff)
This is an automated email from the git hooks/post-receive script. carnil pushed a change to branch master in repository libio-socket-ssl-perl. from 214571f Prepare changelog for release new 8f3266f Add 0001-use-only-ICANN-part-in-public-suffix-list.patch new 9cee8ff Update debian/changelog file The 2 revisions listed above as new are entirely new to this repository and will be described in separate emails. The revisions listed as adds were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 8 +++ ...use-only-ICANN-part-in-public-suffix-list.patch | 61 ++ debian/patches/series | 1 + 3 files changed, 70 insertions(+) create mode 100644 debian/patches/0001-use-only-ICANN-part-in-public-suffix-list.patch create mode 100644 debian/patches/series -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libio-socket-ssl-perl.git ___ Pkg-perl-cvs-commits mailing list Pkg-perl-cvs-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits
[libio-socket-ssl-perl] 02/02: Update debian/changelog file
This is an automated email from the git hooks/post-receive script. carnil pushed a commit to branch master in repository libio-socket-ssl-perl. commit 9cee8ff528409296c9f8ab1a50a878c8ccfdff92 Author: Salvatore Bonaccorso car...@debian.org Date: Sat Nov 1 23:14:34 2014 +0100 Update debian/changelog file Git-Dch: Ignore --- debian/changelog | 8 1 file changed, 8 insertions(+) diff --git a/debian/changelog b/debian/changelog index 680349b..14b90e9 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,11 @@ +libio-socket-ssl-perl (2.002-2) UNRELEASED; urgency=medium + + * Add 0001-use-only-ICANN-part-in-public-suffix-list.patch. +Don't use public suffix list to restrict wildcard certificates. +Thanks to Stefano Rivera (Closes: #767692) + + -- Salvatore Bonaccorso car...@debian.org Sat, 01 Nov 2014 23:14:22 +0100 + libio-socket-ssl-perl (2.002-1) unstable; urgency=low * Imported upstream version 2.002 -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libio-socket-ssl-perl.git ___ Pkg-perl-cvs-commits mailing list Pkg-perl-cvs-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits
[libio-socket-ssl-perl] 01/02: Add 0001-use-only-ICANN-part-in-public-suffix-list.patch
This is an automated email from the git hooks/post-receive script. carnil pushed a commit to branch master in repository libio-socket-ssl-perl. commit 8f3266f1da170fa0335d69627682ca6a6dd780d7 Author: Salvatore Bonaccorso car...@debian.org Date: Sat Nov 1 23:12:49 2014 +0100 Add 0001-use-only-ICANN-part-in-public-suffix-list.patch Don't use public suffix list to restrict wildcard certificates. Thanks: Stefano Rivera Closes: #767692 --- ...use-only-ICANN-part-in-public-suffix-list.patch | 61 ++ debian/patches/series | 1 + 2 files changed, 62 insertions(+) diff --git a/debian/patches/0001-use-only-ICANN-part-in-public-suffix-list.patch b/debian/patches/0001-use-only-ICANN-part-in-public-suffix-list.patch new file mode 100644 index 000..30e5df1 --- /dev/null +++ b/debian/patches/0001-use-only-ICANN-part-in-public-suffix-list.patch @@ -0,0 +1,61 @@ +Description: use only ICANN part in public suffix list +Origin: backport, https://github.com/noxxi/p5-io-socket-ssl/commit/1f9482771fd8d71083a2e388634b3787bd9fe147 +Bug-Debian: https://bugs.debian.org/767692 +Forwarded: not-needed +Author: Steffen Ullrich steffen_ullr...@genua.de +Reviewed-by: Salvatore Bonaccorso car...@debian.org +Last-Update: 2014-11-01 + +--- +diff --git a/lib/IO/Socket/SSL/PublicSuffix.pm b/lib/IO/Socket/SSL/PublicSuffix.pm +index 87c8b0b..a84aacd 100644 +--- a/lib/IO/Socket/SSL/PublicSuffix.pm b/lib/IO/Socket/SSL/PublicSuffix.pm +@@ -293,10 +293,8 @@ sub public_suffix { + sub _default_data { + if ( ! defined $data ) { + $data = do { local $/; DATA }; +- # known exceptions of behavior of SSL certificates from PSL +- $data .= !googleapis.com\n; +- $data .= !s3.amazonaws.com\n; # RT#99702 +- ++ $data =~s{^// ===END ICANN DOMAINS.*}{}ms ++ or die cannot find END ICANN DOMAINS; + } + return $data; + } +diff --git a/t/public_suffix_lib.pl b/t/public_suffix_lib.pl +index 66bdfe4..a9dc4c8 100644 +--- a/t/public_suffix_lib.pl b/t/public_suffix_lib.pl +@@ -30,7 +30,7 @@ sub run_with_lib { + + require IO::Socket::SSL::PublicSuffix; + +-plan tests = 83; ++plan tests = 79; + + + # all one-level, but co.uk two-level +@@ -117,10 +117,14 @@ sub run_with_lib { + is public_suffix('example.com'), 'com'; + is public_suffix('b.example.com'), 'com'; + is public_suffix('a.b.example.com'), 'com'; +-is public_suffix('uk.com'), 'uk.com'; +-is public_suffix('example.uk.com'), 'uk.com'; +-is public_suffix('b.example.uk.com'), 'uk.com'; +-is public_suffix('a.b.example.uk.com'), 'uk.com'; ++ ++# uk.com is not in the ICANN part of the list ++if(0) { ++ is public_suffix('uk.com'), 'uk.com'; ++ is public_suffix('example.uk.com'), 'uk.com'; ++ is public_suffix('b.example.uk.com'), 'uk.com'; ++ is public_suffix('a.b.example.uk.com'), 'uk.com'; ++} + is public_suffix('test.ac'), 'ac'; + + # TLD with only one (wildcard) rule: +-- +2.1.1 + diff --git a/debian/patches/series b/debian/patches/series new file mode 100644 index 000..12003fd --- /dev/null +++ b/debian/patches/series @@ -0,0 +1 @@ +0001-use-only-ICANN-part-in-public-suffix-list.patch -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libio-socket-ssl-perl.git ___ Pkg-perl-cvs-commits mailing list Pkg-perl-cvs-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits
[libio-socket-ssl-perl] branch master updated (9cee8ff - 54332e8)
This is an automated email from the git hooks/post-receive script. carnil pushed a change to branch master in repository libio-socket-ssl-perl. from 9cee8ff Update debian/changelog file new 54332e8 Prepare changelog for release The 1 revisions listed above as new are entirely new to this repository and will be described in separate emails. The revisions listed as adds were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libio-socket-ssl-perl.git ___ Pkg-perl-cvs-commits mailing list Pkg-perl-cvs-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits
[libio-socket-ssl-perl] annotated tag debian/2.002-2 created (now b9b301b)
This is an automated email from the git hooks/post-receive script. carnil pushed a change to annotated tag debian/2.002-2 in repository libio-socket-ssl-perl. at b9b301b (tag) tagging 54332e872fbf44f4087e1d165c93c046e139efb1 (commit) replaces debian/2.002-1 tagged by Salvatore Bonaccorso on Sat Nov 1 23:43:25 2014 +0100 - Log - tagging package libio-socket-ssl-perl version debian/2.002-2 -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAABCgAGBQJUVWINAAoJEAVMuPMTQ89E8uIQAIh/CCDuEOCOUnOYJLjxqQ+Q YT95MF+NFcVYoftFSq5XK1a6m5B6HwxlAVGERJI3sChCWtlDM2D7SXyfLbvXb6yy Ul1qTKMB8TksNC4bWuhl0p+OkZoGPfU3kzAsCz3uHKH8VAJJHKczlQ0WlUTyop8Z fOVmj0ykhfTQJeoy0W5WAUg3e04QiPPIvzmpeDlRxLAM85gtPoQrl5MEOWhnUHay Nwfb6PpRWxVat80n3qJ5gUASG+1jagrNhFDh0GvzYYSi7N7EG9bGgOPf8ffOtb+k M1t//0PMniA6xXJml+lqtlzxThNuCyf/hvD5s8xa8Oba67Iaupc8n6k6On96yq0L ocNPQ30yyBRdcsacwdGkRayTs0nJ5v7G0HJxMbJR5nVp+bD2uz11hN9x4u8E+3Gj 3gSMaOsCYArT3q2+aLS1FZt3cZl8bDrPWcBorm9X6iyNdtcxIlBNb/gM67DeP3m0 TEBvLpjuMAQIh+mVAlJKtsJhRhM63OmLPoa17oj1MOq7lLL9WPGoRr8wbVXyjG9t mAVnpUZjN8SNhhcTD2uzywg8l9hZxIeQd1XWFBbPcOaAtWDVsziBR/Wm1DjqMdvM IENyddykrEnG+s3RnK/mjErmgNe9ALdrYtzEsCFzOq0x8g3Wgk1DcLTRHH2xM2gu 5JzLZhjCRd+gEWPJep4T =ovsO -END PGP SIGNATURE- Salvatore Bonaccorso (3): Add 0001-use-only-ICANN-part-in-public-suffix-list.patch Update debian/changelog file Prepare changelog for release --- This annotated tag includes the following new commits: new 54332e8 Prepare changelog for release The 1 revisions listed above as new are entirely new to this repository and will be described in separate emails. The revisions listed as adds were already present in the repository and have only been added to this reference. -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libio-socket-ssl-perl.git ___ Pkg-perl-cvs-commits mailing list Pkg-perl-cvs-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits
[libio-socket-ssl-perl] 01/01: Prepare changelog for release
This is an automated email from the git hooks/post-receive script. carnil pushed a commit to branch master in repository libio-socket-ssl-perl. commit 54332e872fbf44f4087e1d165c93c046e139efb1 Author: Salvatore Bonaccorso car...@debian.org Date: Sat Nov 1 23:39:23 2014 +0100 Prepare changelog for release Git-Dch: Ignore --- debian/changelog | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/debian/changelog b/debian/changelog index 14b90e9..c97ca7e 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,10 +1,10 @@ -libio-socket-ssl-perl (2.002-2) UNRELEASED; urgency=medium +libio-socket-ssl-perl (2.002-2) unstable; urgency=medium * Add 0001-use-only-ICANN-part-in-public-suffix-list.patch. -Don't use public suffix list to restrict wildcard certificates. +Fixes Don't use public suffix list to restrict wildcard certificates. Thanks to Stefano Rivera (Closes: #767692) - -- Salvatore Bonaccorso car...@debian.org Sat, 01 Nov 2014 23:14:22 +0100 + -- Salvatore Bonaccorso car...@debian.org Sat, 01 Nov 2014 23:39:14 +0100 libio-socket-ssl-perl (2.002-1) unstable; urgency=low -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libio-socket-ssl-perl.git ___ Pkg-perl-cvs-commits mailing list Pkg-perl-cvs-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-perl-cvs-commits