From 7481a58e0f0fe5ce480b5e14aeb919e5373f13fd Mon Sep 17 00:00:00 2001
From: Paul Howarth <paul(a)city-fan.org>
Date: Sep 05 2017 15:12:26 +0000
Subject: Update to 2.051
- New upstream release 2.051
- syswrite: If SSL_write sets SSL_ERROR_SYSCALL but not $! (as seen with
OpenSSL 1.1.0 on Windows), set $! to EPIPE to propagate a useful error up
(GH#62)
---
diff --git a/IO-Socket-SSL-2.047-use-system-default-SSL-version.patch
b/IO-Socket-SSL-2.047-use-system-default-SSL-version.patch
deleted file mode 100644
index 2703290..0000000
--- a/IO-Socket-SSL-2.047-use-system-default-SSL-version.patch
+++ /dev/null
@@ -1,36 +0,0 @@
---- lib/IO/Socket/SSL.pm
-+++ lib/IO/Socket/SSL.pm
-@@ -102,7 +102,7 @@ my $algo2digest = do {
- # global defaults
- my %DEFAULT_SSL_ARGS = (
- SSL_check_crl => 0,
-- SSL_version => 'SSLv23:!SSLv3:!SSLv2', # consider both SSL3.0 and SSL2.0
as broken
-+ SSL_version => '',
- SSL_verify_callback => undef,
- SSL_verifycn_scheme => undef, # fallback cn verification
- SSL_verifycn_publicsuffix => undef, # fallback default list verification
-@@ -2251,7 +2251,7 @@ sub new {
-
- my $ssl_op = $DEFAULT_SSL_OP;
-
-- my $ver;
-+ my $ver = '';
- for (split(/\s*:\s*/,$arg_hash->{SSL_version})) {
- m{^(!?)(?:(SSL(?:v2|v3|v23|v2/3))|(TLSv1(?:_?[12])?))$}i
- or croak("invalid SSL_version specified");
---- lib/IO/Socket/SSL.pod
-+++ lib/IO/Socket/SSL.pod
-@@ -967,11 +967,12 @@ protocol to the specified version.
- All values are case-insensitive. Instead of 'TLSv1_1' and 'TLSv1_2' one
can
- also use 'TLSv11' and 'TLSv12'. Support for 'TLSv1_1' and
'TLSv1_2' requires
- recent versions of Net::SSLeay and openssl.
-+The default SSL_version is defined by the underlying cryptographic library.
-
- Independent from the handshake format you can limit to set of accepted SSL
- versions by adding !version separated by ':'.
-
--The default SSL_version is 'SSLv23:!SSLv3:!SSLv2' which means, that the
-+For example, 'SSLv23:!SSLv3:!SSLv2' means that the
- handshake format is compatible to SSL2.0 and higher, but that the successful
- handshake is limited to TLS1.0 and higher, that is no SSL2.0 or SSL3.0 because
- both of these versions have serious security issues and should not be used
diff --git a/IO-Socket-SSL-2.051-use-system-default-SSL-version.patch
b/IO-Socket-SSL-2.051-use-system-default-SSL-version.patch
new file mode 100644
index 0000000..2e53011
--- /dev/null
+++ b/IO-Socket-SSL-2.051-use-system-default-SSL-version.patch
@@ -0,0 +1,36 @@
+--- lib/IO/Socket/SSL.pm
++++ lib/IO/Socket/SSL.pm
+@@ -102,7 +102,7 @@ my $algo2digest = do {
+ # global defaults
+ my %DEFAULT_SSL_ARGS = (
+ SSL_check_crl => 0,
+- SSL_version => 'SSLv23:!SSLv3:!SSLv2', # consider both SSL3.0 and SSL2.0
as broken
++ SSL_version => '',
+ SSL_verify_callback => undef,
+ SSL_verifycn_scheme => undef, # fallback cn verification
+ SSL_verifycn_publicsuffix => undef, # fallback default list verification
+@@ -2253,7 +2253,7 @@ sub new {
+
+ my $ssl_op = $DEFAULT_SSL_OP;
+
+- my $ver;
++ my $ver = '';
+ for (split(/\s*:\s*/,$arg_hash->{SSL_version})) {
+ m{^(!?)(?:(SSL(?:v2|v3|v23|v2/3))|(TLSv1(?:_?[12])?))$}i
+ or croak("invalid SSL_version specified");
+--- lib/IO/Socket/SSL.pod
++++ lib/IO/Socket/SSL.pod
+@@ -967,11 +967,12 @@ protocol to the specified version.
+ All values are case-insensitive. Instead of 'TLSv1_1' and 'TLSv1_2' one
can
+ also use 'TLSv11' and 'TLSv12'. Support for 'TLSv1_1' and
'TLSv1_2' requires
+ recent versions of Net::SSLeay and openssl.
++The default SSL_version is defined by the underlying cryptographic library.
+
+ Independent from the handshake format you can limit to set of accepted SSL
+ versions by adding !version separated by ':'.
+
+-The default SSL_version is 'SSLv23:!SSLv3:!SSLv2' which means, that the
++For example, 'SSLv23:!SSLv3:!SSLv2' means that the
+ handshake format is compatible to SSL2.0 and higher, but that the successful
+ handshake is limited to TLS1.0 and higher, that is no SSL2.0 or SSL3.0 because
+ both of these versions have serious security issues and should not be used
diff --git a/perl-IO-Socket-SSL.spec b/perl-IO-Socket-SSL.spec
index 9078c17..e5be3b3 100644
--- a/perl-IO-Socket-SSL.spec
+++ b/perl-IO-Socket-SSL.spec
@@ -1,12 +1,12 @@
Name: perl-IO-Socket-SSL
-Version: 2.050
+Version: 2.051
Release: 1%{?dist}
Summary: Perl library for transparent SSL
License: GPL+ or Artistic
URL:
http://search.cpan.org/dist/IO-Socket-SSL/
Source0:
http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-%{version...
Patch0: IO-Socket-SSL-2.045-use-system-default-cipher-list.patch
-Patch1: IO-Socket-SSL-2.047-use-system-default-SSL-version.patch
+Patch1: IO-Socket-SSL-2.051-use-system-default-SSL-version.patch
BuildArch: noarch
# Module Build
BuildRequires: coreutils
@@ -111,6 +111,12 @@ make test
%{_mandir}/man3/IO::Socket::SSL::Utils.3*
%changelog
+* Tue Sep 5 2017 Paul Howarth <paul(a)city-fan.org> - 2.051-1
+- Update to 2.051
+ - syswrite: If SSL_write sets SSL_ERROR_SYSCALL but not $! (as seen with
+ OpenSSL 1.1.0 on Windows), set $! to EPIPE to propagate a useful error up
+ (GH#62)
+
* Fri Aug 18 2017 Paul Howarth <paul(a)city-fan.org> - 2.050-1
- Update to 2.050
- Removed unnecessary settings of SSL_version and SSL_cipher_list from tests
diff --git a/sources b/sources
index 439477c..32b6d97 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (IO-Socket-SSL-2.050.tar.gz) =
49edda46df64a6f09485843ddae81db674d9f8c8a1a0a10638567367ca544372f4ccf6ef062add2fa960819c582e14c3f50db7d19a67af2523a2e26111a06b66
+SHA512 (IO-Socket-SSL-2.051.tar.gz) =
36b7c8b0369297fdbddf48aebab5646248718f5692b358074f6de4858a4a952d8c9ac0e398e9023805f923bb52c3b9e0605d3cd5b39d67d7cf12d38aa9ee6e78
https://src.fedoraproject.org/rpms/perl-IO-Socket-SSL/c/7481a58e0f0fe5ce4...