|
Packit |
b893dc |
Revision history for Perl extension Net::SSLeay.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.88 2019-05-10
|
|
Packit |
b893dc |
- New stable release incorporating all changes from developer
|
|
Packit |
b893dc |
releases 1.86_01 to 1.86_11.
|
|
Packit |
b893dc |
- From this release, Net-SSLeay is switching to an "odd/even"
|
|
Packit |
b893dc |
developer/stable release version numbering system, like that of
|
|
Packit |
b893dc |
many core modules (e.g. ExtUtils::MakeMaker): developer releases
|
|
Packit |
b893dc |
will have an odd minor version number (and the usual "_xx" suffix),
|
|
Packit |
b893dc |
and stable releases will have an even minor version number. This
|
|
Packit |
b893dc |
means there is no Net-SSLeay 1.87.
|
|
Packit |
b893dc |
- Summary of major changes since version 1.85:
|
|
Packit |
b893dc |
- Mike McCauley has stepped down as maintainer. The new maintainers
|
|
Packit |
b893dc |
are Chris Novakovic, Heikki Vatiainen and Tuure Vartiainen.
|
|
Packit |
b893dc |
- The source code has moved from the now-defunct Debian Subversion
|
|
Packit |
b893dc |
server (alioth.debian.org) to GitHub
|
|
Packit |
b893dc |
(https://github.com/radiator-software/p5-net-ssleay).
|
|
Packit |
b893dc |
- Net-SSLeay is provided under the terms of the Artistic License
|
|
Packit |
b893dc |
2.0 - this has been the case since version 1.66, but references
|
|
Packit |
b893dc |
to other licenses remained in the source code, causing ambiguity.
|
|
Packit |
b893dc |
- Perl 5.8.1 or newer is now required to use Net-SSLeay. This has
|
|
Packit |
b893dc |
already been the case for some time in practice, as the test
|
|
Packit |
b893dc |
suite hasn't fully passed on Perl 5.6 for several years.
|
|
Packit |
b893dc |
- Much-improved compatibility with OpenSSL 1.1.1, and improved
|
|
Packit |
b893dc |
support for TLS 1.3.
|
|
Packit |
b893dc |
- Fixed a long-standing bug in cb_data_advanced_put() that caused
|
|
Packit |
b893dc |
memory leaks when callbacks were frequently added and removed.
|
|
Packit |
b893dc |
- Support in the test suite for "hardened" OpenSSL configurations
|
|
Packit |
b893dc |
that set a default security level of 2 or higher (e.g., in the
|
|
Packit |
b893dc |
OpenSSL packages that ship with recent versions of Debian, Fedora
|
|
Packit |
b893dc |
and Ubuntu).
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_11 2019-05-08
|
|
Packit |
b893dc |
- Clarified Net-SSLeay's licensing terms: the module distribution has
|
|
Packit |
b893dc |
been released under the terms of the Artistic License 2.0 since
|
|
Packit |
b893dc |
version 1.66; references to other licenses have been removed. Fixes
|
|
Packit |
b893dc |
RT#106314. Thanks to Kent Fredric for pointing out the ambiguity.
|
|
Packit |
b893dc |
- Replace the HTTPS hosts in the external tests (some of which were
|
|
Packit |
b893dc |
no longer online) with more resilient ones. Closes issue #26.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_10 2019-05-04
|
|
Packit |
b893dc |
- Use locally-generated certificate chain in local tests rather
|
|
Packit |
b893dc |
than the Twitter one, which changes regularly and breaks the
|
|
Packit |
b893dc |
test suite unnecessarily. Fixes RT#129201. Thanks to Petr Písař
|
|
Packit |
b893dc |
for the report and patch, and Steffen Ullrich for an alternative
|
|
Packit |
b893dc |
patch suggestion.
|
|
Packit |
b893dc |
- In t/local/09_ctx_new.t, rather than checking that the functions
|
|
Packit |
b893dc |
(CTX_)get_min_proto_version and (CTX_)get_max_proto_version return
|
|
Packit |
b893dc |
0x0000 (indicating the lowest and highest versions supported by
|
|
Packit |
b893dc |
libssl respectively, which is not the case if a run-time
|
|
Packit |
b893dc |
configuration is enforcing a different minimum or maximum), just
|
|
Packit |
b893dc |
check whether the returned value is one of those mentioned on the
|
|
Packit |
b893dc |
SSL_CTX_set_min_proto_version(3) man page. Partially fixes
|
|
Packit |
b893dc |
RT#128025. Thanks to Slaven Rezić and Dmytro Zagashev for the
|
|
Packit |
b893dc |
downstream reports.
|
|
Packit |
b893dc |
- Move from 1024-bit keys/certificates to 2048-bit keys/certificates
|
|
Packit |
b893dc |
across the entire test suite. This removes the need to manually
|
|
Packit |
b893dc |
set the security level to 1 in tests that used the old keys, and
|
|
Packit |
b893dc |
fixes large numbers of test failures on modern Linux distributions
|
|
Packit |
b893dc |
that set the minimum OpenSSL security level to 2. Fixes RT#126270
|
|
Packit |
b893dc |
and the remainder of RT#128025. Thanks to Petr Písař and Slaven
|
|
Packit |
b893dc |
Rezić for the downstream reports.
|
|
Packit |
b893dc |
- In t/local/06_tcpecho.t and t/local/07_sslecho.t, connect to
|
|
Packit |
b893dc |
127.0.0.1 instead of localhost. This fixes these tests when
|
|
Packit |
b893dc |
executed inside a network sandbox that disrupts the behaviour of
|
|
Packit |
b893dc |
gethostbyname(). Fixes RT#128207. Thanks to Kent Fredric for the
|
|
Packit |
b893dc |
downstream report.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_09 2019-03-12
|
|
Packit |
b893dc |
- Add missing files to MANIFEST that prevented tests from passing
|
|
Packit |
b893dc |
when installing from the 1.86_08 release tarball.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_08 2019-03-12
|
|
Packit |
b893dc |
- Add and fix functions needed to properly implement client
|
|
Packit |
b893dc |
side session reuse for TLS 1.3 with using
|
|
Packit |
b893dc |
CTX_sess_set_new_cb. Newly exposed functions:
|
|
Packit |
b893dc |
SSL_SESSION_dup and SSL_SESSION_up_ref.
|
|
Packit |
b893dc |
Fixed functions: i2d_SSL_SESSION and d2i_SSL_SESSION.
|
|
Packit |
b893dc |
Thanks to Steffen Ullrich.
|
|
Packit |
b893dc |
- Add functions functions to allow reading multiple pems from
|
|
Packit |
b893dc |
file and creating untrusted chain: These functions allow you
|
|
Packit |
b893dc |
to:
|
|
Packit |
b893dc |
- Read in a PEM file with multiple certificates as a
|
|
Packit |
b893dc |
STACK_OF(X509_INFO)
|
|
Packit |
b893dc |
- Determine the size of the STACK_OF(X509_INFO) and value at
|
|
Packit |
b893dc |
an index, which allows you to loop over the stack.
|
|
Packit |
b893dc |
- Retrieve the X509 structure from each X509_INFO structure
|
|
Packit |
b893dc |
in the stack.
|
|
Packit |
b893dc |
Then you can create a new STACK_OF(X509) and push the X509
|
|
Packit |
b893dc |
structures onto the new stack. You can then pass this
|
|
Packit |
b893dc |
STACK_OF(X509) to X509_STORE_CTX_init which will allow you
|
|
Packit |
b893dc |
to add additional untrusted certificates to the chain for
|
|
Packit |
b893dc |
verification. Exposed functions are:
|
|
Packit |
b893dc |
PEM_X509_INFO_read_bio
|
|
Packit |
b893dc |
sk_X509_INFO_num
|
|
Packit |
b893dc |
sk_X509_INFO_value
|
|
Packit |
b893dc |
sk_X509_INFO_free
|
|
Packit |
b893dc |
sk_X509_new_null
|
|
Packit |
b893dc |
sk_X509_free
|
|
Packit |
b893dc |
sk_X509_push
|
|
Packit |
b893dc |
New function implemented by Net::SSLeay:
|
|
Packit |
b893dc |
P_X509_INFO_get_x509
|
|
Packit |
b893dc |
Thanks to Marc Reisner.
|
|
Packit |
b893dc |
- Add functions and constants that are necessary to verify a
|
|
Packit |
b893dc |
certificate using a hash directory outside of an SSL/TLS
|
|
Packit |
b893dc |
connection. Newly exposed functions:
|
|
Packit |
b893dc |
X509_STORE_CTX_init
|
|
Packit |
b893dc |
X509_STORE_CTX_free
|
|
Packit |
b893dc |
X509_STORE_new
|
|
Packit |
b893dc |
X509_STORE_free
|
|
Packit |
b893dc |
X509_STORE_add_lookup
|
|
Packit |
b893dc |
X509_LOOKUP_hash_dir
|
|
Packit |
b893dc |
X509_LOOKUP_add_dir
|
|
Packit |
b893dc |
Newly exposed constants:
|
|
Packit |
b893dc |
X509_FILETYPE_ASN1
|
|
Packit |
b893dc |
X509_FILETYPE_DEFAULT
|
|
Packit |
b893dc |
X509_FILETYPE_PEM
|
|
Packit |
b893dc |
Thanks to Marc Reisner.
|
|
Packit |
b893dc |
- Declare n_a in ssleay_set_psk_client_callback_invoke and
|
|
Packit |
b893dc |
ssleay_ctx_set_psk_client_callback_invoke to avoid a compilation
|
|
Packit |
b893dc |
error with Perl versions below 5.8.8. Fixes RT#128030. Thanks to
|
|
Packit |
b893dc |
Graham Ollis for the report.
|
|
Packit |
b893dc |
- Add X509_get0_serialNumber. Thanks to Marc Reisner.
|
|
Packit |
b893dc |
- Enable Travis CI for LibreSSL 2.2.1, 2.7.5, 2.8.3 and 2.9.0
|
|
Packit |
b893dc |
on Perl 5.20 and more recent.
|
|
Packit |
b893dc |
- Expose the following functions for curve and group selection:
|
|
Packit |
b893dc |
- CTX_set_ecdh_auto, set_ecdh_auto
|
|
Packit |
b893dc |
- CTX_set1_curves_list, set1_curves_list
|
|
Packit |
b893dc |
- CTX_set1_groups_list, set1_groups_list
|
|
Packit |
b893dc |
Thanks to Steffen Ullrich.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_07 2018-12-13
|
|
Packit |
b893dc |
- Net::SSLeay::RSA_generate_key() now prefers using
|
|
Packit |
b893dc |
RSA_generate_key_ex. This avois deprecated RSA_generate_key
|
|
Packit |
b893dc |
and allows removing the only Android specific code in
|
|
Packit |
b893dc |
SSLeay.xs. Fixes RT#127593. Thanks to Rouven Weiler.
|
|
Packit |
b893dc |
- SSL_CTX_get0_param, SSL_CTX_get0_param,
|
|
Packit |
b893dc |
X509_VERIFY_PARAM_set1_host, X509_VERIFY_PARAM_add1_host,
|
|
Packit |
b893dc |
X509_VERIFY_PARAM_set_hostflags,
|
|
Packit |
b893dc |
X509_VERIFY_PARAM_get0_peername,
|
|
Packit |
b893dc |
X509_VERIFY_PARAM_set1_email, X509_VERIFY_PARAM_set1_ip and
|
|
Packit |
b893dc |
X509_VERIFY_PARAM_set1_ip_asc added in 1.83 for OpenSSL
|
|
Packit |
b893dc |
1.0.2 and later are now available with LibreSSL 2.7.0 and
|
|
Packit |
b893dc |
later.
|
|
Packit |
b893dc |
- get_keyblock_size() now gets the MAC secret size from the
|
|
Packit |
b893dc |
cipher on LibreSSL 2.7.0 and later, rather than reaching
|
|
Packit |
b893dc |
into libssl internals. This effectively takes the OpenSSL
|
|
Packit |
b893dc |
1.1 code path for LibreSSL 2.7.0 instead of the OpenSSL 1.0
|
|
Packit |
b893dc |
code path. Thanks to Alexander Bluhm.
|
|
Packit |
b893dc |
- get_client_random and get_server_random now use API
|
|
Packit |
b893dc |
functions supported by LibreSSL 2.7.0 and later. Thanks to
|
|
Packit |
b893dc |
Alexander Bluhm.
|
|
Packit |
b893dc |
- Add X509_check_host(), X509_check_email(), X509_check_ip(),
|
|
Packit |
b893dc |
and X509_check_ip_asc() for LibreSSL 2.5.0 and later. Thanks
|
|
Packit |
b893dc |
to Alexander Bluhm.
|
|
Packit |
b893dc |
- OpenSSL_version() and OpenSSL_version_num() are available
|
|
Packit |
b893dc |
with LibreSSL 2.7.0 and later. Thanks to Alexander Bluhm.
|
|
Packit |
b893dc |
- Use OPENSSL_cleanse() instead of memset(). Fixes
|
|
Packit |
b893dc |
RT#116599. Thanks to A. Sinan Unur.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_06 2018-09-29
|
|
Packit |
b893dc |
- Net::SSLeay::read() and SSL_peek() now check SSL_get_error()
|
|
Packit |
b893dc |
for SSL_ERROR_ZERO_RETURN for return values <= 0 to make
|
|
Packit |
b893dc |
Net::SSLeay::read() behave more like underlying OpenSSL
|
|
Packit |
b893dc |
function SSL_read().
|
|
Packit |
b893dc |
Convenience function ssl_read_all() now does an automatic
|
|
Packit |
b893dc |
retry when ERROR_WANT_READ or ERROR_WANT_WRITE is returned
|
|
Packit |
b893dc |
with Net::SSLeay::read().
|
|
Packit |
b893dc |
Convenience function ssl_read_until() now uses
|
|
Packit |
b893dc |
Net::SSLeay::ssl_read_all() instead of
|
|
Packit |
b893dc |
Net::SSLeay::read(). Tests 07_sslecho.t and 36_verify.t were
|
|
Packit |
b893dc |
also updated to use ssl_read_all() and ssl_write_all(). The
|
|
Packit |
b893dc |
tests now also disable TLSv1.3 session tickets and ignore
|
|
Packit |
b893dc |
SIGPIPE to avoid this signal when the client has finished
|
|
Packit |
b893dc |
before server has sent session tickets and called
|
|
Packit |
b893dc |
Net::SSLeay::accept().
|
|
Packit |
b893dc |
Thanks to Petr Pisar and Sebastian Andrzej Siewior for the
|
|
Packit |
b893dc |
patches (in #RT125218).
|
|
Packit |
b893dc |
- Fix a memory leak in cb_data_advanced_put. Fixes
|
|
Packit |
b893dc |
RT#127131. Noticed, investigated and patched by Paul
|
|
Packit |
b893dc |
Evans. Thanks!
|
|
Packit |
b893dc |
- Enable OpenSSL 1.1.1-pre9 with Travis CI.
|
|
Packit |
b893dc |
- Add SSL_CTX_set_num_tickets, SSL_CTX_get_num_tickets,
|
|
Packit |
b893dc |
SSL_set_num_ticket and SSL_get_num_tickets for controlling
|
|
Packit |
b893dc |
the number of TLSv1.3 session tickets that are issued. Add
|
|
Packit |
b893dc |
tests in 44_sess.t. Parts taken from a larger patch by Petr
|
|
Packit |
b893dc |
Pisar of RedHat.
|
|
Packit |
b893dc |
- Add SSL_CTX_set_ciphersuites and SSL_set_ciphersuites for
|
|
Packit |
b893dc |
configuring the available TLSv1.3 ciphersuites. Add tests in
|
|
Packit |
b893dc |
43_misc_functions.t and clarify SSL_client_version tests.
|
|
Packit |
b893dc |
- Add SSL_CTX_set_security_level, SSL_CTX_get_security_level,
|
|
Packit |
b893dc |
SSL_set_security_level and SSL_get_security_level.
|
|
Packit |
b893dc |
Add new test file 65_security_level.t.
|
|
Packit |
b893dc |
All courtesy of Damyan Ivanov of Debian project.
|
|
Packit |
b893dc |
- Fix export_keying_material return value check and context
|
|
Packit |
b893dc |
handling. SSL_export_keying_material use_context is now
|
|
Packit |
b893dc |
correctly set to non-zero value when context is an empty
|
|
Packit |
b893dc |
string. This affects values exported with TLSv1.2 and earlier.
|
|
Packit |
b893dc |
Update documentation in NetSSLeay.pod and add tests
|
|
Packit |
b893dc |
in t/local/45_export.t.
|
|
Packit |
b893dc |
- Add RAND_priv_bytes. Add new test file t/local/10_rand.t for
|
|
Packit |
b893dc |
RAND_bytes, RAND_pseudo_bytes, RAND_priv_bytes, RAND_status,
|
|
Packit |
b893dc |
RAND_poll, RAND_file_name and RAND_load_file.
|
|
Packit |
b893dc |
- Update documentation for RAND_*bytes return values and
|
|
Packit |
b893dc |
RAND_file_name behaviour with LibreSSL.
|
|
Packit |
b893dc |
- Add SSL_SESSION_is_resumable. Add and update tests in 44_sess.t.
|
|
Packit |
b893dc |
- Set OpenSSL security level to 1 in tests that use the test suite's
|
|
Packit |
b893dc |
(1024-bit) RSA keys, which allows the test suite to pass when
|
|
Packit |
b893dc |
Net-SSLeay is built against an OpenSSL with a higher default
|
|
Packit |
b893dc |
security level. Fixes RT#126987. Thanks to Petr Pisar (in
|
|
Packit |
b893dc |
RT#126270) and Damyan Ivanov (in RT#126987) for the reports and
|
|
Packit |
b893dc |
patches, and to Damyan Ivanov for the preferred patch.
|
|
Packit |
b893dc |
- Add SSL_CTX_sess_set_new_cb and SSL_CTX_sess_set_remove_cb.
|
|
Packit |
b893dc |
Add new test file 44_sess.t for these and future session
|
|
Packit |
b893dc |
related tests for which no specific test file is needed.
|
|
Packit |
b893dc |
- Add SSL_get_version, SSL_client_version and SSL_is_dtls.
|
|
Packit |
b893dc |
- Add SSL_peek_ex, SSL_read_ex, SSL_write_ex and SSL_has_pending.
|
|
Packit |
b893dc |
Add tests in t/local/11_read.t
|
|
Packit |
b893dc |
- Add SSL_CTX_set_post_handshake_auth contributed by Paul
|
|
Packit |
b893dc |
Howarth. Add SSL_set_post_handshake_auth,
|
|
Packit |
b893dc |
SSL_verify_client_post_handshake and constant
|
|
Packit |
b893dc |
SSL_VERIFY_POST_HANDSHAKE.
|
|
Packit |
b893dc |
- Applied a patch to set_cert_and_key() from Damyan Ivanov,
|
|
Packit |
b893dc |
Debian Perl Group. This function now returns errors from
|
|
Packit |
b893dc |
library's error stack only when an underlying routine
|
|
Packit |
b893dc |
fails. Unrelated errors are now skipped. Fixes RT#126988.
|
|
Packit |
b893dc |
- Add support for TLSv1.3 via $Net::SSLeay::ssl_version.
|
|
Packit |
b893dc |
- Enhance t/local/43_misc_functions.t get_keyblock_size test
|
|
Packit |
b893dc |
to work better with AEAD ciphers.
|
|
Packit |
b893dc |
- Add constants SSL_OP_ENABLE_MIDDLEBOX_COMPAT and
|
|
Packit |
b893dc |
SSL_OP_NO_ANTI_REPLAY for TLSv1.3
|
|
Packit |
b893dc |
- Fix compile time DEFINE=-DSHOW_XS_DEBUG to work with
|
|
Packit |
b893dc |
non-threaded Perls. Fixes RT#127027. Thanks to SREZIC for
|
|
Packit |
b893dc |
the report. Also fix other minor compile warnings.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_05 2018-08-22
|
|
Packit |
b893dc |
- Net-SSLeay now requires at least Perl 5.8.1. This is a
|
|
Packit |
b893dc |
formalisation of what has been the de facto case for some time,
|
|
Packit |
b893dc |
as the distribution hasn't compiled and passed its tests on Perl
|
|
Packit |
b893dc |
5.005 for several years.
|
|
Packit |
b893dc |
- Increment Net::SSLeay::Handle's version number to keep it in sync
|
|
Packit |
b893dc |
with Net::SSLeay's, thus satisfying Kwalitee's consistent_version
|
|
Packit |
b893dc |
metric.
|
|
Packit |
b893dc |
- Re-enable the d2i_X509_bio() test in t/local/33_x509_create_cert.t
|
|
Packit |
b893dc |
for LibreSSL. Thanks to Alexander Bluhm.
|
|
Packit |
b893dc |
- Automatically detect new library names on Windows for OpenSSL
|
|
Packit |
b893dc |
1.1.0 onwards (libcrypto, libssl). Fixes part of RT#121084. Thanks
|
|
Packit |
b893dc |
to Jean-Damien Durand.
|
|
Packit |
b893dc |
- Fix a typo preventing OpenSSL libraries built with the VC compiler
|
|
Packit |
b893dc |
(i.e. ones with a ".lib" suffix) from being automatically detected
|
|
Packit |
b893dc |
on Windows. Fixes part of RT#121084. Thanks to Jean-Damien Durand.
|
|
Packit |
b893dc |
- Add missing call to va_end() following va_start() in TRACE().
|
|
Packit |
b893dc |
Fixes RT#126028. Thanks to Jitka Plesnikova.
|
|
Packit |
b893dc |
- Added SSL_in_init() and the related functions for all
|
|
Packit |
b893dc |
libraries and their versions. All return 0 or 1 as
|
|
Packit |
b893dc |
documented by OpenSSL 1.1.1. Use of these functions is
|
|
Packit |
b893dc |
recommended over using constants returned by get_state() and
|
|
Packit |
b893dc |
state(). New constants TLS_ST_*, used by OpenSSL 1.1.0 and
|
|
Packit |
b893dc |
later, will not be made available by Net::SSLeay.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_04 2018-07-30
|
|
Packit |
b893dc |
- Re-add SSLv3_method() for OpenSSL 1.0.2 and above. Fixes
|
|
Packit |
b893dc |
RT#101484.
|
|
Packit |
b893dc |
- Don't expose ENGINE-related functions when building against
|
|
Packit |
b893dc |
OpenSSL builds without ENGINE support. Fixes RT#121538. Thanks to
|
|
Packit |
b893dc |
Paul Green.
|
|
Packit |
b893dc |
- Automatically detect OpenSSL 1.0.x on VMS, and update VMS
|
|
Packit |
b893dc |
installation instructions to reflect removal of Module::Install
|
|
Packit |
b893dc |
from the build system. Fixes RT#124388. Thanks to Craig A. Berry.
|
|
Packit |
b893dc |
- Prevent memory leak in OCSP_cert2ids() and OCSP_response_verify().
|
|
Packit |
b893dc |
Fixes RT#125273. Thanks to Steffen Ullrich.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_03 2018-07-19
|
|
Packit |
b893dc |
- Convert packaging to ExtUtils::MakeMaker. Thanks to mohawk2.
|
|
Packit |
b893dc |
- Module::Install is no longer a prerequisite when building
|
|
Packit |
b893dc |
from the reposistory.
|
|
Packit |
b893dc |
- Re-apply patch from ETJ permitting configure and build in
|
|
Packit |
b893dc |
places with a space in the name.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_02 2018-07-06
|
|
Packit |
b893dc |
- Removed inc/ from repository. Module::Install is now a
|
|
Packit |
b893dc |
prerequisite when building from the repository. This allowed
|
|
Packit |
b893dc |
also removing "." from Makefile.PL lib path which was added
|
|
Packit |
b893dc |
in version 1.81. These updates require no changes when
|
|
Packit |
b893dc |
building from release packages. They also help AppVeyor
|
|
Packit |
b893dc |
builds to work better with old Perls.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- Added CONTRIBUTING.md, reformatted the previous Changes
|
|
Packit |
b893dc |
entry to use CPAN::Changes::Spec guidelines and removed
|
|
Packit |
b893dc |
unused version control tags from comments.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.86_01 2018-07-04
|
|
Packit |
b893dc |
- Net::SSLeay functionality was not changed in this release.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- Maintainer changes:
|
|
Packit |
b893dc |
- Mike McCauley, maintainer of Net-SSLeay since November 2005,
|
|
Packit |
b893dc |
has stepped down. Thanks to Mike for his 13 years of
|
|
Packit |
b893dc |
stewardship.
|
|
Packit |
b893dc |
- Net-SSLeay is now maintained by Chris Novakovic, Heikki
|
|
Packit |
b893dc |
Vatiainen and Tuure Vartiainen.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- Version control system changes:
|
|
Packit |
b893dc |
- The previous Debian-hosted SVN repository has been imported
|
|
Packit |
b893dc |
into Git. The source code is now maintained on GitHub, at
|
|
Packit |
b893dc |
https://github.com/radiator-software/p5-net-ssleay.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- Fixes to commit metadata, branches and tags that git-svn
|
|
Packit |
b893dc |
couldn't handle or had no way of handling, were done
|
|
Packit |
b893dc |
manually or semi-automatically afterwards. For instance, the
|
|
Packit |
b893dc |
"git-svn-id:" lines that git-svn appends to commit messages
|
|
Packit |
b893dc |
were kept because Mike used SVN revision numbers in RT
|
|
Packit |
b893dc |
replies to indicate when bugs had been fixed/patches applied
|
|
Packit |
b893dc |
(which may be useful for future reference).
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- All commits were replayed onto a single master branch rather
|
|
Packit |
b893dc |
than having separate dead-end branches for the old SVN
|
|
Packit |
b893dc |
version tags (as this seems more "git-like").
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- New lightweight tags were created for each public release
|
|
Packit |
b893dc |
going back as far as the start of the SVN repository using
|
|
Packit |
b893dc |
data from MetaCPAN (cross-referencing with the changelog
|
|
Packit |
b893dc |
when it wasn't clear when a release was cut from the SVN
|
|
Packit |
b893dc |
repo).
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- Florian's and Mike's email addresses were mapped to git
|
|
Packit |
b893dc |
author/committer IDs
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- Continuous integration:
|
|
Packit |
b893dc |
- Travis CI configuration was added for automated testing on
|
|
Packit |
b893dc |
Linux using 64 bit Ubuntu Trusty. Build matrix dimensions
|
|
Packit |
b893dc |
are: Perl 5.8 - 5.26 x OpenSSL 0.9.8zh - 1.1.0h. Only the
|
|
Packit |
b893dc |
currently latest version for each major Perl and OpenSSL
|
|
Packit |
b893dc |
release is chosen.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- AppVeyor configuration was added for automated testing on
|
|
Packit |
b893dc |
Windows. Build matrix dimensions are: Perl 5.8 - 5.26 x
|
|
Packit |
b893dc |
32bit and 64bit Perl environment x Windows Server 2012R2 and
|
|
Packit |
b893dc |
Windows Server 2016. The Perl environment is Strawberry Perl
|
|
Packit |
b893dc |
and its OpenSSL is used with builds. Only the latest major
|
|
Packit |
b893dc |
versions are used, similarly to Travis CI. Net-SSLeay PPM
|
|
Packit |
b893dc |
and PPD files are made available as artifacts.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- Added README.md with link to master branch build and test
|
|
Packit |
b893dc |
status. Did minor updates to README and other misc files.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- Release packaging:
|
|
Packit |
b893dc |
- Files t/local/43_misc_functions.t and
|
|
Packit |
b893dc |
t/local/65_ticket_sharing_2.t were missing from MANIFEST.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
- Updated inc/ directory with Module::Install 1.19. Updated
|
|
Packit |
b893dc |
Makefile.PL author and resource information. Synced
|
|
Packit |
b893dc |
SSLeay.pm under ext/ with the latest changes under
|
|
Packit |
b893dc |
inc/. Reordered use imports so that META.yml gets correctly
|
|
Packit |
b893dc |
regenerated. More Module::Install related changes will
|
|
Packit |
b893dc |
follow.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.85 2018-03-14
|
|
Packit |
b893dc |
Preparations for transferring maintenace to a new maintainer
|
|
Packit |
b893dc |
Fixed test failure in t/local/33_x509_create_cert.t for some version of OpenSSL.
|
|
Packit |
b893dc |
Fixed free() error that causes "Free to wrong pool ..." merssage on Windows.
|
|
Packit |
b893dc |
Reported and patched by Steffen Ullrich.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.84 2018-01-17
|
|
Packit |
b893dc |
Fixed an error in t/local/04_basic.t causing a test failure if
|
|
Packit |
b893dc |
Test::Exception not installed. Reported by Joel Berger.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.83 2018-01-16
|
|
Packit |
b893dc |
Fixed a problem with exporting OPENSSL_NO_NEXTPROTONEG even though they are not availble on LibreSSL.
|
|
Packit |
b893dc |
Patch patch-SSLeay_xs-NO_NPN from Alexander Bluhm.
|
|
Packit |
b893dc |
Patch from Heikki Vatiainen adds support for SSL_set_default_passwd_cb* for
|
|
Packit |
b893dc |
OpenSSL 1.1.0f and later. LibreSSL does not support these functions, at
|
|
Packit |
b893dc |
least yet.
|
|
Packit |
b893dc |
Patch from Heikki Vatiainen adds new functions related to SSL_CTX_new.
|
|
Packit |
b893dc |
Patch from Heikki Vatiainen adds two new functions introduced in OpenSSL 1.1.0, a number
|
|
Packit |
b893dc |
of constants and a couple of const qualifiers to SSLeay.xs. Tests and
|
|
Packit |
b893dc |
documentation .pod were also updated.
|
|
Packit |
b893dc |
Patch from Heikki Vatiainen adds one new OpenSSL 1.1.0 function and has a minor fix for
|
|
Packit |
b893dc |
LibreSSL version detection:
|
|
Packit |
b893dc |
* Added support for SSL_use_certificate_chain_file
|
|
Packit |
b893dc |
function introduced in OpenSSL 1.1.0.
|
|
Packit |
b893dc |
* Fixed LibreSSL version detection to correctly parse
|
|
Packit |
b893dc |
LibreSSL minor version.
|
|
Packit |
b893dc |
Patch from Steffen Ulrich to fix memory leaks in OCSP handling. Thanks.
|
|
Packit |
b893dc |
Patch from Heikki Vatiainen adds new functions for certificate verification introduced in
|
|
Packit |
b893dc |
OpenSSL 1.02, a number of constants, new test data files, new tests and
|
|
Packit |
b893dc |
updates to .pod documentation.
|
|
Packit |
b893dc |
The new functions provide access to the built-in wildcard check
|
|
Packit |
b893dc |
functionality available in OpenSSL 1.0.2 and later.
|
|
Packit |
b893dc |
The patch also adds new tests for the new functions and updates some of
|
|
Packit |
b893dc |
the current tests for CTX_set_default_passwd_cb* functions.
|
|
Packit |
b893dc |
Added X509_STORE_CTX_new and X509_verify_cert.
|
|
Packit |
b893dc |
SSL_OCSP_response_verify now clears the error queue if OCSP_basic_verify fails but the
|
|
Packit |
b893dc |
intermediate certificate succeeds. Patch from Stefan Ullrich.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.82 2017-10-31
|
|
Packit |
b893dc |
Added support for building under Linuxbrew (a linuxbrew version of MacOS Homebrew)
|
|
Packit |
b893dc |
Patch from Matthew Altus, that implements SSL_CTX_set_psk_client_callback() and SSL_set_psk_client_callback().
|
|
Packit |
b893dc |
Patch to build with LibreSSL has no support for NPN
|
|
Packit |
b893dc |
Also skip the NPN test if the SSL library is LibreSSL.
|
|
Packit |
b893dc |
Fixed a problem with a variable declaration in ssleay_session_secret_cb_invoke reported by Graham Ollis.
|
|
Packit |
b893dc |
Significant patch set from Open System Consultants:
|
|
Packit |
b893dc |
- Bugfix: tlsext_status_cb_invoke(...): free ocsp_response only when allocated.
|
|
Packit |
b893dc |
- The same callback is used on a server side for OCSP stapling and in that
|
|
Packit |
b893dc |
case ocsp_response is NULL and not used.
|
|
Packit |
b893dc |
- New feature: Added a binding SSL_set_session_ticket_ext_cb(ssl,callback,data)
|
|
Packit |
b893dc |
- A callback used by EAP-FAST/EAP-TEAT to parse and process TLS session ticket.
|
|
Packit |
b893dc |
- Tests are in t/local/65_ticket_sharing_2.t
|
|
Packit |
b893dc |
- New feature: Added a binding SSL_set_session_ticket_ext(ssl,ticket)
|
|
Packit |
b893dc |
- Used by EAP-FAST/EAP-TEAP to define TLS session ticket value.
|
|
Packit |
b893dc |
- Tests are in t/local/65_ticket_sharing_2.t
|
|
Packit |
b893dc |
- Bugfix: tlsext_ticket_key_cb_invoke(...): allow SHA256 HMAC key to be 32 bytes
|
|
Packit |
b893dc |
instead of 16 bytes (which OpenSSL will pad with zeros up to 32 bytes).
|
|
Packit |
b893dc |
- New feature: Added following bindings:
|
|
Packit |
b893dc |
- X509_get_ex_data(cert,idx)
|
|
Packit |
b893dc |
- X509_get_ex_new_index(argl,argp,new_func,dup_funL,free_func)
|
|
Packit |
b893dc |
- X509_get_app_data(cert)
|
|
Packit |
b893dc |
- X509_set_ex_data(cert,idx,data)
|
|
Packit |
b893dc |
- X509_set_app_data(cert,arg)
|
|
Packit |
b893dc |
- X509_STORE_CTX_get_ex_new_index(argl,argp,new_func,dup_func,free_func)
|
|
Packit |
b893dc |
- X509_STORE_CTX_get_app_data(x509_store_ctx)
|
|
Packit |
b893dc |
- X509_STORE_CTX_set_app_data(x509_store_ctx,arg)
|
|
Packit |
b893dc |
- New feature: Added an implementation for SSL_get_finished(ssl,buf,count=2*EVP_MAX_MD_SIZE)
|
|
Packit |
b893dc |
- Tests are in t/local/43_misc_functions.t
|
|
Packit |
b893dc |
- New feature: Added an implementation for SSL_get_peer_finished(ssl,buf,count=2*EVP_MAX_MD_SIZE)
|
|
Packit |
b893dc |
- Tests are in t/local/43_misc_functions.t
|
|
Packit |
b893dc |
- Bugfix: SSL_get_keyblock_size(s): Calculate key block size correctly also with AEAD ciphers
|
|
Packit |
b893dc |
which don’t use digest functions.
|
|
Packit |
b893dc |
- New feature: Added a binding SSL_set_tlsext_status_ocsp_resp(ssl,staple)
|
|
Packit |
b893dc |
- Used by a server side to include OCSP staple in ServerHello.
|
|
Packit |
b893dc |
- Bugfix: SSL_OCSP_response_verify(ssl,rsp,svreq,flags): check that chain and last are not NULL
|
|
Packit |
b893dc |
before trying to use them.
|
|
Packit |
b893dc |
- Bugfix: inc/Module/Install/PRIVATE/Net/SSLeay.pm: Don’t quote include and lib paths.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.81 2017-03-28
|
|
Packit |
b893dc |
Patch from Alexander Bluhm to enable RSA_get_key_parameters with
|
|
Packit |
b893dc |
LibreSSL. Again.
|
|
Packit |
b893dc |
Fixed memory leak in X509_get_subjectAltNames. Reported and patched by Jim Westfall.
|
|
Packit |
b893dc |
Added . to lib path in Makefile.PL and t/local/32_x509_get_cert_info.t
|
|
Packit |
b893dc |
to accommodate people who are using a perl with -Ddefault_inc_excludes_dot
|
|
Packit |
b893dc |
or perl 25 or later.
|
|
Packit |
b893dc |
Fixed build failure if engine support not present. Patch from Paul Green.
|
|
Packit |
b893dc |
Improvements to get_my_thread_id to work around possibility of ERRSV not being defined eg on OpenWRT.
|
|
Packit |
b893dc |
Patch from ETJ permitting configure and build in places with a space in the name.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.80 2017-01-05
|
|
Packit |
b893dc |
Patch from Steffen Ulrich that fixed unexpected changes in the
|
|
Packit |
b893dc |
control flow of the Perl program which seemed to be triggered by the
|
|
Packit |
b893dc |
ticket key callback. Thanks Steffen.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.79 2017-01-03
|
|
Packit |
b893dc |
Patch to fix a few inline variable declarations that cause errors for
|
|
Packit |
b893dc |
older compilers. From Andy Grundman. Thanks.
|
|
Packit |
b893dc |
Patch: Generated C code is not compatible with MSVC, AIX cc,
|
|
Packit |
b893dc |
probably others. Added some PREINIT blocks and replaced 2 cases of INIT with
|
|
Packit |
b893dc |
PREINIT. From Andy Grundman. Thanks.
|
|
Packit |
b893dc |
Patch to fix: Fails to compile if the OpenSSL library it's built
|
|
Packit |
b893dc |
against has compression support compiled out. From Stephan
|
|
Packit |
b893dc |
Wall. Thanks.
|
|
Packit |
b893dc |
Added RSA_get_key_parameters() to return a list of pointers to RSA key
|
|
Packit |
b893dc |
internals.
|
|
Packit |
b893dc |
Patch to fix some documentation typos courtesy gregor herrmann.
|
|
Packit |
b893dc |
RSA_get_key_parameters() is now only available prior OpenSSL 1.1.
|
|
Packit |
b893dc |
Testing with openssl-1.1.0b.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.78 2016-08-13
|
|
Packit |
b893dc |
Fixed broken OCSP code and tests. Broken since 1.75. Patched by
|
|
Packit |
b893dc |
Steffen Ullrich. Thanks.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.77 2016-08-01
|
|
Packit |
b893dc |
Fixed incorrect size to memset in tlsext_ticket_key_cb_invoke.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.76 2016-07-31
|
|
Packit |
b893dc |
Replaced bzero with memset. Bzero not present on windows.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.75 2016-07-31
|
|
Packit |
b893dc |
Compatibility with OpenSSL 1.1, tested with openssl-1.1.0-pre5:
|
|
Packit |
b893dc |
- Conditionally remove threading locking code, not needed in 1.1
|
|
Packit |
b893dc |
- Rewrite code that accesses inside X509_ATTRIBUTE struct.
|
|
Packit |
b893dc |
- SSL_CTX_need_tmp_RSA, SSL_CTX_set_tmp_rsa,
|
|
Packit |
b893dc |
SSL_CTX_set_tmp_rsa_callback, SSL_set_tmp_rsa_callback support
|
|
Packit |
b893dc |
not available in 1.1.
|
|
Packit |
b893dc |
- SSL_session_reused is now native
|
|
Packit |
b893dc |
- SSL_get_keyblock_size modifed to use new API
|
|
Packit |
b893dc |
- OCSP functions modified to use new API under 1.1
|
|
Packit |
b893dc |
- SSL_set_state removed with 1.1
|
|
Packit |
b893dc |
- SSL_get_state and SSL_state are now equivalent and available in all
|
|
Packit |
b893dc |
versions
|
|
Packit |
b893dc |
- SSL_CTX_v2_new removed
|
|
Packit |
b893dc |
- SESSION_set_master_key removed with 1.1. Code that previously used
|
|
Packit |
b893dc |
SESSION_set_master_key must now set $secret in the session_secret
|
|
Packit |
b893dc |
callback set with SSL_set_session_secret_cb
|
|
Packit |
b893dc |
- With 1.1, $secret in the session_secret
|
|
Packit |
b893dc |
callback set with SSL_set_session_secret_cb can be changed to alter
|
|
Packit |
b893dc |
the master key (required by EAP-FAST).
|
|
Packit |
b893dc |
Added a function EC_KEY_generate_key similar to RSA_generate_key and a
|
|
Packit |
b893dc |
function EVP_PKEY_assign_EC_KEY similar to EVP_PKEY_assign_RSA. Using
|
|
Packit |
b893dc |
these functions it is easy to create and use EC keys in the same way as
|
|
Packit |
b893dc |
RSA keys. Patch provided by Steffen Ullrich. Thanks Steffen.
|
|
Packit |
b893dc |
Testing with LibreSSL 2.4.1, with compatibility patch from Steffen
|
|
Packit |
b893dc |
Ullrich. Thanks Steffen.
|
|
Packit |
b893dc |
Patch from Steffen Ulrich provides support for cross context (and cross process)
|
|
Packit |
b893dc |
session sharing using the stateless TLS session tickets. It uses the
|
|
Packit |
b893dc |
SSL_CTX_set_tlsext_ticket_key_cb function to manage the encryption and
|
|
Packit |
b893dc |
decryption of the tickets but provides a more simplified
|
|
Packit |
b893dc |
interface. Includes new function CTX_set_tlsext_ticket_getkey_cb.
|
|
Packit |
b893dc |
To not conflict with the OpenSSL name in case the more complex interface
|
|
Packit |
b893dc |
will be implemented ever the current simplified interface is called
|
|
Packit |
b893dc |
slightly different: CTX_set_tlsext_ticket_*get*key_cb.
|
|
Packit |
b893dc |
Added documentation about downloading latest version from SVN.
|
|
Packit |
b893dc |
Added missing Module/install files to SVN.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.74 2016-04-12
|
|
Packit |
b893dc |
README.OSX was missing from the distribution
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.73 2016-04-11
|
|
Packit |
b893dc |
Added X509_get_X509_PUBKEY. Patch supplied by GUILHEM. Thanks.
|
|
Packit |
b893dc |
Added README.OSX with instructions on how to build for recent OS X.
|
|
Packit |
b893dc |
Added info about using OPENSSL_PREFIX to README.Win32.
|
|
Packit |
b893dc |
Added comments in POD about installation documentation.
|
|
Packit |
b893dc |
Added '/usr/local/opt/openssl/bin/openssl' to Openssl search path for
|
|
Packit |
b893dc |
latest version of OSX homebrew openssl. Patch from Shoichi Kaji.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.72 2015-09-22
|
|
Packit |
b893dc |
Fixed a problem where SvPVx_nolen was undefined in some versions of
|
|
Packit |
b893dc |
perl. Reported by Karen Etheridge. Replaced with SvPV_nolen.
|
|
Packit |
b893dc |
Fixed a cast warning on Darwin reported by Karen Etheridge.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.71 2015-09-18
|
|
Packit |
b893dc |
Patch from Ben Kaduk: Conditionalise support for MD4, MD5.
|
|
Packit |
b893dc |
Added support for linking libraries in /usr/local/lib64 for some flavours
|
|
Packit |
b893dc |
of Linux like RH Tikanga.
|
|
Packit |
b893dc |
Fixes to X509_check_host, X509_check_ip, SSL_CTX_set_alpn_protos, and
|
|
Packit |
b893dc |
SSL_set_alpn_protos so they will compile on MSVC and AIX cc. Thanks to
|
|
Packit |
b893dc |
AGRUNDMA.
|
|
Packit |
b893dc |
Fixed typos in documentation for X509_NAME_new and X509_NAME_hash
|
|
Packit |
b893dc |
incorrect version 1.45 instead of 1.55 given.
|
|
Packit |
b893dc |
Version number in META.yml is now quoted per request from Satoshi Yagi.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.70 2015-06-26
|
|
Packit |
b893dc |
Patch from Alexander Bluhm: The new OpenSSL 1.0.2 X509_check_* functions are not available in
|
|
Packit |
b893dc |
current LibreSSL. So disable them in SSLeay.xs.
|
|
Packit |
b893dc |
Fixed a problem with building against OSX homebrew's openssl. Patch from
|
|
Packit |
b893dc |
Shoichi Kaji.
|
|
Packit |
b893dc |
Removed a test in t/local/33_x509_create_cert.t which fails due to
|
|
Packit |
b893dc |
changes in 1.0.1n and later
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.69 2015-06-04
|
|
Packit |
b893dc |
Testing with OpenSSL 1.0.2, 1.0.2a. OK.
|
|
Packit |
b893dc |
Completed LibreSSL compatibility with the kind assistance of Alexander
|
|
Packit |
b893dc |
Bluhm.
|
|
Packit |
b893dc |
Improved compatibility with OpenSSL 1.0.2a as suggested by Petr Pisar.
|
|
Packit |
b893dc |
Added the X509_check_* functions introduced in OpenSSL 1.0.2, contributed
|
|
Packit |
b893dc |
by Carsten Gaebler.
|
|
Packit |
b893dc |
Added support for X509_V_FLAG_TRUSTED_FIRST constant, patch from Gisle Aas.
|
|
Packit |
b893dc |
Patch allows get_keyblock_size to work correctly with
|
|
Packit |
b893dc |
OpenSSL 1.0.1 and later versions. Contributed by Heikki Vatiainen.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.68 2015-01-24
|
|
Packit |
b893dc |
Fixed a problem on OSX when macports openssl 1.x is installed: headers from
|
|
Packit |
b893dc |
macport were found but older OSX openssl libraries were linked, resulting
|
|
Packit |
b893dc |
in "Symbol not found: _EVP_MD_do_all_sorted".
|
|
Packit |
b893dc |
Added notes about runtime error "no OPENSSL_Applink", when calling
|
|
Packit |
b893dc |
Net::SSLeay::P_PKCS12_load_file.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.67 2015-01-17
|
|
Packit |
b893dc |
Improvements to inc/Module/Install/PRIVATE/Net/SSLeay.pm to handle the
|
|
Packit |
b893dc |
case whe there are muliple OPENSSLs installed. Patch from HBRAND
|
|
Packit |
b893dc |
Fixed a documentation error in get_peer_cert_chain, reported by tejas.
|
|
Packit |
b893dc |
Fixed a problem with building on Windows that prevented correct OpenSSL
|
|
Packit |
b893dc |
directory detection with version 1.0.1j as delivered with Shining Light OpenSSL.
|
|
Packit |
b893dc |
Fixed a problem with building on Windows that prevented finding MT or MD
|
|
Packit |
b893dc |
versions of SSL libraries.
|
|
Packit |
b893dc |
Updated doc in README.Win32 to build with Microsoft Visual Studio 2010 Express.
|
|
Packit |
b893dc |
Added Windows crypt32 library to Windows linking as some compilers/platforms seem to
|
|
Packit |
b893dc |
require it and it is innocuous otherwise. For Steve Hay.
|
|
Packit |
b893dc |
Fixed a failure in t/external/20_cert_chain.t where some platforms do not
|
|
Packit |
b893dc |
have HTTPS in /etc/services. Reported and patched by Gisle Aas.
|
|
Packit |
b893dc |
Recent 1.0.2 betas have dropped the SSLv3_method function.
|
|
Packit |
b893dc |
This patch leaves out the function on newer versions, much the same as
|
|
Packit |
b893dc |
the SSLv2 deprecation is handled. Patch from Tom Molesworth.
|
|
Packit |
b893dc |
Fix the ALPN test, which was incorrectly failing on OpenSSL due to the
|
|
Packit |
b893dc |
LibreSSL check (earlier versions bailed out before that line).Patch from
|
|
Packit |
b893dc |
Tom Molesworth.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.66 2014-08-21
|
|
Packit |
b893dc |
Fixed compile problem with perl prior to 5.8.8, similar to
|
|
Packit |
b893dc |
RT#76267. Reported by Graham Knop.
|
|
Packit |
b893dc |
Fixed a problem with Socket::IPPROTO_TCP on early perls.
|
|
Packit |
b893dc |
After discussions with the community and the original author Sampo
|
|
Packit |
b893dc |
Kellomaki, the license conditions have been changed to "Perl Artisitic
|
|
Packit |
b893dc |
License 2.0".
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.65 2014-07-14
|
|
Packit |
b893dc |
Added note to doc to make it clear that X509_get_subjectAltNames returns a
|
|
Packit |
b893dc |
packed binary IP address for type 7 - GEN_IPADD.
|
|
Packit |
b893dc |
Improvements to SSL_OCSP_response_verify to compile under non c99
|
|
Packit |
b893dc |
compilers. Requested by MERIJNB.
|
|
Packit |
b893dc |
Port to Android, contributed by Brian Fraser. Includes Android specific
|
|
Packit |
b893dc |
version of RSA_generate_key.
|
|
Packit |
b893dc |
Added LibreSSL support, patch provided by Alexander Bluhm. Thanks!
|
|
Packit |
b893dc |
Patch that fixes the support for SSL_set_info_callback and adds
|
|
Packit |
b893dc |
SSL_CTX_set_info_callback and SSL_set_state. Support for these functions is
|
|
Packit |
b893dc |
necessary to either detect renegotiation or to enforce
|
|
Packit |
b893dc |
renegotiation. Contributed by Steffen Ullrich. Thanks!
|
|
Packit |
b893dc |
Fixed a problem with SSL_set_state not available on some early OpenSSLs,
|
|
Packit |
b893dc |
patched by Steffen Ullrich. Thanks!
|
|
Packit |
b893dc |
Removed arbitrary size limits from calls to tcp_read_all in tcpcat() and
|
|
Packit |
b893dc |
http_cat().
|
|
Packit |
b893dc |
Removed unnecessary Debian_SPANTS.txt from MANIFEST. Again.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.64 2014-06-11
|
|
Packit |
b893dc |
Fixes for test ocsp.t. Test now does not fail if HTTP::Tiny is not
|
|
Packit |
b893dc |
installed.
|
|
Packit |
b893dc |
Fixed repository in META.yml.
|
|
Packit |
b893dc |
Fixed a problem with SSL_get_peer_cert_chain: if the SSL handshake
|
|
Packit |
b893dc |
results in an anonymous authentication, like ADH-DES-CBC3-SHA,
|
|
Packit |
b893dc |
get_peer_cert_chain will not return an empty list, but instead return the
|
|
Packit |
b893dc |
SSL object. Reported and fixed by Steffen
|
|
Packit |
b893dc |
Ullrich. Thanks.
|
|
Packit |
b893dc |
Fixed a problem where patch
|
|
Packit |
b893dc |
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=3009244da47b989c4cc59ba02cf81a4e9d8f8431
|
|
Packit |
b893dc |
caused a failed test in t/local/33_x509_create_cert.t.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.63 2014-05-19
|
|
Packit |
b893dc |
Fixed error in version number in META.yml
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.62 2014-05-19
|
|
Packit |
b893dc |
Improvements to OCSP support: It turns out that some CA (like Verisign)
|
|
Packit |
b893dc |
sign the OCSP response with the CA we have in the trust store and don't
|
|
Packit |
b893dc |
attach this certifcate in the response. But OpenSSL by itself only
|
|
Packit |
b893dc |
considers the certificates included in the response and
|
|
Packit |
b893dc |
SSL_OCSP_response_verify added the certificates in the chain too.
|
|
Packit |
b893dc |
Now, we also add the trusted CA from the store which
|
|
Packit |
b893dc |
signed the lowest chain certificate, at least if we could not verify the
|
|
Packit |
b893dc |
OCSP response without doing it. Patch from Steffen
|
|
Packit |
b893dc |
Ullrich. Thanks.
|
|
Packit |
b893dc |
Fixed some compiler warnings.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.61 2014-05-12
|
|
Packit |
b893dc |
Changes calloc to Newx and free to Safefree, otherwise there might be
|
|
Packit |
b893dc |
problems because calloc is done from a different memory pool than free (depends
|
|
Packit |
b893dc |
on the build options for perl, but seen on Windows). Patch from Steffen
|
|
Packit |
b893dc |
Ullrich. Thanks.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.60 2014-05-10
|
|
Packit |
b893dc |
Fixed a typo in an error message. Patch from gregor herrmann. Thanks.
|
|
Packit |
b893dc |
Fixed a problem with building with openssl that does not support
|
|
Packit |
b893dc |
OCSP. Also fixed some newly introduced warnings
|
|
Packit |
b893dc |
if compiled with -Wall. Patch from Steffen Ullrich. Thanks.
|
|
Packit |
b893dc |
fix build-failure on most Debian architectures:
|
|
Packit |
b893dc |
SSLeay.xs: In function 'XS_Net__SSLeay_OCSP_response_results':
|
|
Packit |
b893dc |
SSLeay.xs:5602:3: error: format not a string literal and no format
|
|
Packit |
b893dc |
arguments. Patch from gregor herrmann.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.59 2014-05-10
|
|
Packit |
b893dc |
Fixed local/30_error.t, so that tests do not fail if diagnostics are
|
|
Packit |
b893dc |
enabled.
|
|
Packit |
b893dc |
Fixed error messages about undefined strings used with length or
|
|
Packit |
b893dc |
split. Reported and patched by Peter Heuchert.
|
|
Packit |
b893dc |
Improvements to configuration of OPTIMIZE flags, to prevent overriding
|
|
Packit |
b893dc |
of perls expected optimization flags. Caution: HPUX aCC optimize options are special.
|
|
Packit |
b893dc |
SSL_peek() now returns openssl error code as second item when called in
|
|
Packit |
b893dc |
array context, same as SSL_read. Patch from Andreas Mohr.
|
|
Packit |
b893dc |
Fixed some warnings.
|
|
Packit |
b893dc |
Added support for tlsv1.1 tlsv1.2 via $Net::SSLeay::ssl_version. Patch
|
|
Packit |
b893dc |
from Andreas Mohr.
|
|
Packit |
b893dc |
Improve examples in 'Using other perl modules based on
|
|
Packit |
b893dc |
Net::SSLeay'. Patched by Andreas Mohr.
|
|
Packit |
b893dc |
Added support for OCSP. Patched by Steffen Ullrich. Thanks!
|
|
Packit |
b893dc |
Added missing t/external/ocsp.t
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.58 2014-01-15
|
|
Packit |
b893dc |
Always use size_t for strlen() return value, requested by Alexander Bluhm.
|
|
Packit |
b893dc |
t/external/20_cert_chain.t was missing from dist.
|
|
Packit |
b893dc |
Version number in META.yml was incorrect
|
|
Packit |
b893dc |
Improvements to test t/external/20_cert_chain.t to provoke following bug:
|
|
Packit |
b893dc |
Fixed crash due to SSL_get_peer_cert_chain incorrectly free'ing the chain
|
|
Packit |
b893dc |
after use.
|
|
Packit |
b893dc |
Fixed a problem when compiling against openssl where OPENSSL_NO_EC is set.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.57 2014-01-09
|
|
Packit |
b893dc |
Fixed remaining problems with test suite: pod coverage and kwalitee tests
|
|
Packit |
b893dc |
are only enabled with RELEASE_TESTING=1
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.56 2014-01-08
|
|
Packit |
b893dc |
Fixed a typo in documentation of BEAST Attack, patched by gregor
|
|
Packit |
b893dc |
herrmann.
|
|
Packit |
b893dc |
Added LICENSE file copied form OpenSSL distribution to prevent complaints
|
|
Packit |
b893dc |
from various versions of kwalitee.
|
|
Packit |
b893dc |
Adjusted license: in META.yml to be 'openssl'
|
|
Packit |
b893dc |
Adds support for the basic operations necessary to support ECDH for PFS,
|
|
Packit |
b893dc |
e.g. EC_KEY_new_by_curve_name, EC_KEY_free and SSL_CTX_set_tmp_ecdh.
|
|
Packit |
b893dc |
Improvements to t/handle/external/50_external.t to handle the case when a
|
|
Packit |
b893dc |
test connection was not possible. Patched by Alexandr Ciornii.
|
|
Packit |
b893dc |
Added support for ALPN TLS extension. Patch from Lubomir Rintel. Tested
|
|
Packit |
b893dc |
with openssl-1.0.2-stable-SNAP-20131205.
|
|
Packit |
b893dc |
Fix an use-after-free error. Patch from Lubomir Rintel.
|
|
Packit |
b893dc |
Fixed a problem with Invalid comparison on OBJ_cmp result in
|
|
Packit |
b893dc |
t/local/36_verify.t. Contributed by paul.
|
|
Packit |
b893dc |
Added support for get_peer_cert_chain(). Patch by Markus Benning.
|
|
Packit |
b893dc |
Fixed a bug that could cause stack faults: mixed up PUTBACK with SPAGAIN in ssleay_RSA_generate_key_cb_invoke()
|
|
Packit |
b893dc |
a final PUTBACK is needed here. A second issue is also fixed:
|
|
Packit |
b893dc |
cb->data defaults to &PL_sv_undef but throught the code you do not check
|
|
Packit |
b893dc |
against &PL_sv_undef, just NULL.
|
|
Packit |
b893dc |
To avoid passing the 3rd optional arg at all, do not create it. This fixes all the
|
|
Packit |
b893dc |
cb->data checks and wrong refcounts on &PL_sv_undef. Patched by Reini Urban.
|
|
Packit |
b893dc |
Deleted support for SSL_get_tlsa_record_byname: it is not included in
|
|
Packit |
b893dc |
OpenSSL git master.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.55 2013-06-08
|
|
Packit |
b893dc |
Added support for TLSV1_1 and TLSV1_2 methods with SSL_CTX_tlsv1_1_new(),
|
|
Packit |
b893dc |
SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and TLSv1_2_method(), where
|
|
Packit |
b893dc |
available in the underlying openssl.
|
|
Packit |
b893dc |
Added CRL support functions X509_CRL_get_ext(), X509_CRL_get_ext_by_NID(),
|
|
Packit |
b893dc |
X509_CRL_get_ext_count(). Patch from Franck Youssef.
|
|
Packit |
b893dc |
Fixed a problem which could cause content with a value of '0' to not be
|
|
Packit |
b893dc |
correctly encoded by do_httpx3 and friends. Reported by Victor Efimov via
|
|
Packit |
b893dc |
RT.
|
|
Packit |
b893dc |
Added support for SSL_get_tlsa_record_byname() required for DANE support in
|
|
Packit |
b893dc |
openssl-1.0.2 and later. SSL_get_tlsa_record_byname() was added to
|
|
Packit |
b893dc |
OpenSSL with the financial assistance of .SE.
|
|
Packit |
b893dc |
Testing with openssl-1.0.2-stable-SNAP-20130521.
|
|
Packit |
b893dc |
Added X509_NAME_new and X509_NAME_hash, patched by Franck Youssef.
|
|
Packit |
b893dc |
Fixed a number of typos in pod file thanks to dsteinbrunner.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.54 2013-03-23
|
|
Packit |
b893dc |
t/data/testcert_cdp.crt.pem_dump and t/data/testcert_cdp.crt.pem were
|
|
Packit |
b893dc |
missing from MANIFEST.
|
|
Packit |
b893dc |
Added MANIFEST to svn
|
|
Packit |
b893dc |
Improvement to test 07_sslecho.t so that if set_cert_and_key fails we
|
|
Packit |
b893dc |
can tell why.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.53 2013-03-22
|
|
Packit |
b893dc |
Added support for SSL_export_keying_material where present (ie in OpenSSL
|
|
Packit |
b893dc |
1.0.1 and later).
|
|
Packit |
b893dc |
Changed t/handle/external/50_external.t to use www.airspayce.com instead of
|
|
Packit |
b893dc |
perldition.org, who no longer have an https server.
|
|
Packit |
b893dc |
Patch to fix a crash: P_X509_get_crl_distribution_points on an
|
|
Packit |
b893dc |
X509 certificate with values in the CDP extension which do not have an
|
|
Packit |
b893dc |
ia5 string will cause a segmentation fault when accessed. Patch from
|
|
Packit |
b893dc |
Robert Duncan.
|
|
Packit |
b893dc |
Change in t/local/32_x509_get_cert_info.t to not use
|
|
Packit |
b893dc |
Net::SSLeay::ASN1_INTEGER_get, since it works differntly on 32 and 64 bit platforms.
|
|
Packit |
b893dc |
Updated author and distribution location details to airspayce.com
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.52 2013-01-09
|
|
Packit |
b893dc |
Rebuild package with gnu format tar, to prevent problems with unpacking
|
|
Packit |
b893dc |
on other systems such as old Solaris,
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.51 2012-12-14
|
|
Packit |
b893dc |
Fixed a problem where SSL_set_SSL_CTX is not available with
|
|
Packit |
b893dc |
OpenSSL < 0.9.8f. Reported by Paul.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.50 2012-12-13
|
|
Packit |
b893dc |
Fixed a problem where t/handle/external/50_external.t would crash if any
|
|
Packit |
b893dc |
of the test sites were not contactable.
|
|
Packit |
b893dc |
Now builds on VMS. Patch kindly supplied by Craig A. Berry.
|
|
Packit |
b893dc |
Fixed a few compiler warnings in SSLeay.xs. Most of them
|
|
Packit |
b893dc |
are just signed/unsigned pointer mismatches but there is one that actually
|
|
Packit |
b893dc |
fixes returning what would be an arbitrary value off the stack from
|
|
Packit |
b893dc |
get_my_thread_id if it happened to be called in a non-threaded build.
|
|
Packit |
b893dc |
Patch kindly supplied by Craig A. Berry.
|
|
Packit |
b893dc |
Added README.VMS, contributed by Craig A. Berry.
|
|
Packit |
b893dc |
Added SSL_set_tlsext_host_name, SSL_get_servername,
|
|
Packit |
b893dc |
SSL_get_servername_type, SSL_CTX_set_tlsext_servername_callback for
|
|
Packit |
b893dc |
server side Server Name Indication (SNI) support. Patched by kmx.
|
|
Packit |
b893dc |
Further mods for VMS building supplied by Craig A. Berry.
|
|
Packit |
b893dc |
Fixed a problem with C++ comments preventing builds on AIX and
|
|
Packit |
b893dc |
HPUX. Patched by Gisle Aas.
|
|
Packit |
b893dc |
perdition.org not available for tests, changed to www.airspayce.com
|
|
Packit |
b893dc |
Added SSL_FIPS_mode_set
|
|
Packit |
b893dc |
Improvements to test suite so it succeeds with and without FIPS mode
|
|
Packit |
b893dc |
enabled. Patch supplied by Petr Pisar.
|
|
Packit |
b893dc |
Added documentation, warning not to pass UTF-8 data in the content
|
|
Packit |
b893dc |
argument to post_https. Reported by Jason Terry.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.49 2012-09-25
|
|
Packit |
b893dc |
Fixed problem where on some platforms test t/local/07_tcpecho.t would
|
|
Packit |
b893dc |
bail out if it could not bind port 1212. Now now tries a number of ports to bind to until
|
|
Packit |
b893dc |
successful.
|
|
Packit |
b893dc |
Improvements to unsigned casting contributed by Reini Urban.
|
|
Packit |
b893dc |
Improvements to Net::SSLeay::read to make it easier to use with non-blocking IO:
|
|
Packit |
b893dc |
contributed by James Marshall: It modifies
|
|
Packit |
b893dc |
Net::SSLeay::read() to return the result from SSL_read() as the second
|
|
Packit |
b893dc |
return value, if Net::SSLeay::read() is called in list context. Its
|
|
Packit |
b893dc |
behavior should be unchanged if called in scalar or void context. This
|
|
Packit |
b893dc |
result code seems to be required for full support of non-blocking I/O,
|
|
Packit |
b893dc |
since users need to handle SSL_ERR_WANT_READ, SSL_ERROR_WANT_WRITE, etc.
|
|
Packit |
b893dc |
Fixed a problem where t/local/kwalitee.t fails with
|
|
Packit |
b893dc |
Module::CPANTS::Analyse 0.86. Patch from Paul.
|
|
Packit |
b893dc |
Fixed a number of typos patched by Giles.
|
|
Packit |
b893dc |
Fixed a compiler warning from Compiling with gcc-4.4 and -Wall, patched by Giles.
|
|
Packit |
b893dc |
Fixed problems with get_https4: documentation was wrong, $header_ref was
|
|
Packit |
b893dc |
not correctly set and $server_cert was not returned.
|
|
Packit |
b893dc |
Fixed a problem that could cause a Perl exception about no blength
|
|
Packit |
b893dc |
method on undef. Reported by "Stephen J. Smith via RT". https://rt.cpan.org/Ticket/Display.html?id=79309
|
|
Packit |
b893dc |
Added documentation about how to mitigatxe various SSL/TLS
|
|
Packit |
b893dc |
vulnerabilities.
|
|
Packit |
b893dc |
Fixed problem reported by Mike Doherty: SSL_MODE_* are defined in ssl.h,
|
|
Packit |
b893dc |
and should be available as constants, but I do not see them listed in constants.h
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.48 2012-04-25
|
|
Packit |
b893dc |
Removed unneeded Debian_CPANTS.txt from MANIFEST.
|
|
Packit |
b893dc |
Fixed incorrect documentation about the best way to call CTX_set_options.
|
|
Packit |
b893dc |
Fixed problem that caused Undefined subroutine utf8::encode @
|
|
Packit |
b893dc |
t/local/33_x509_create_cert.t (on perl 5.6.2). Thanks to kmx.
|
|
Packit |
b893dc |
In examples and pod documentations, changed #!/usr/local/bin/perl to #!/usr/bin/perl.
|
|
Packit |
b893dc |
t/local/06_tcpecho.t now tries a number of ports to bind to until
|
|
Packit |
b893dc |
successful.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.47 2012-04-04
|
|
Packit |
b893dc |
Fixed overlong lines in pod, patch from Salvatore Bonaccorso, Debian Perl
|
|
Packit |
b893dc |
Group
|
|
Packit |
b893dc |
Fixed spelling errors in pod, patch from Salvatore Bonaccorso, Debian Perl
|
|
Packit |
b893dc |
Group
|
|
Packit |
b893dc |
Fixed extra "garbage" files in 1.46 tarball. Patch from kmx.
|
|
Packit |
b893dc |
Fixed incorrect fail reports on some 64 bit platforms. Patch from paul.
|
|
Packit |
b893dc |
Fix to avoid FAIL reports from cpantesters with missing openssl
|
|
Packit |
b893dc |
Use my_snprintf from ppport.h to prevent link failures with perl 5.8 and
|
|
Packit |
b893dc |
earlier when compiled with MSVC.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.46 2012-04-03
|
|
Packit |
b893dc |
Fixed a problem reported by Atoomic:
|
|
Packit |
b893dc |
When bootstrapping Net::SSleay ( with DynaLoader ) if you override the SIG{DIE} signal, using
|
|
Packit |
b893dc |
Net::SSLeay will result in an error.
|
|
Packit |
b893dc |
Recreated META.yml, added META.yml to dist
|
|
Packit |
b893dc |
Fixed typo: the word "corresponding" was mis-spelled as "coresponding"
|
|
Packit |
b893dc |
throughout the POD. Patched by kmx.
|
|
Packit |
b893dc |
Updated META.yml to include repository and bugtracker
|
|
Packit |
b893dc |
Constants cleanup - removing non existing constants (perhaps from pre-0.9.6 era) - kmx
|
|
Packit |
b893dc |
Automatic constants.c generation via helper_script/regen_openssl_constants.pl - kmx
|
|
Packit |
b893dc |
Future changes in constants now under better control via
|
|
Packit |
b893dc |
t/local/21_constants.t - kmx
|
|
Packit |
b893dc |
Added missing new files
|
|
Packit |
b893dc |
Reordering @EXPORT_OK (constants first, functions next) - kmx
|
|
Packit |
b893dc |
Adding missing 51 constants to @EXPORT_OK + test to keep it in sync - kmx
|
|
Packit |
b893dc |
Instructions "howto add new constant" added to helper_script/regen_openssl_constants.pl - kmx
|
|
Packit |
b893dc |
NEWLY INTRODUCED CONSTANTS:
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_STRFLGS_ESC_CTRL
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_STRFLGS_ESC_MSB
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_STRFLGS_ESC_QUOTE
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_STRFLGS_RFC2253
|
|
Packit |
b893dc |
- Net::SSLeay::ERROR_WANT_ACCEPT
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKS_DSA
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKS_EC
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKS_RSA
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKT_ENC
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKT_EXCH
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKT_EXP
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKT_SIGN
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PK_DH
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PK_DSA
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PK_EC
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PK_RSA
|
|
Packit |
b893dc |
- Net::SSLeay::MBSTRING_ASC
|
|
Packit |
b893dc |
- Net::SSLeay::MBSTRING_BMP
|
|
Packit |
b893dc |
- Net::SSLeay::MBSTRING_FLAG
|
|
Packit |
b893dc |
- Net::SSLeay::MBSTRING_UNIV
|
|
Packit |
b893dc |
- Net::SSLeay::MBSTRING_UTF8
|
|
Packit |
b893dc |
- Net::SSLeay::OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION
|
|
Packit |
b893dc |
- Net::SSLeay::OP_CISCO_ANYCONNECT
|
|
Packit |
b893dc |
- Net::SSLeay::OP_CRYPTOPRO_TLSEXT_BUG
|
|
Packit |
b893dc |
- Net::SSLeay::OP_LEGACY_SERVER_CONNECT
|
|
Packit |
b893dc |
- Net::SSLeay::OP_NO_TLSv1_1
|
|
Packit |
b893dc |
- Net::SSLeay::OP_NO_TLSv1_2
|
|
Packit |
b893dc |
- Net::SSLeay::OP_SINGLE_ECDH_USE
|
|
Packit |
b893dc |
- Net::SSLeay::OP_TLS_BLOCK_PADDING_BUG
|
|
Packit |
b893dc |
- Net::SSLeay::X509_V_FLAG_CHECK_SS_SIGNATURE
|
|
Packit |
b893dc |
- Net::SSLeay::X509_V_FLAG_EXTENDED_CRL_SUPPORT
|
|
Packit |
b893dc |
- Net::SSLeay::X509_V_FLAG_POLICY_MASK
|
|
Packit |
b893dc |
- Net::SSLeay::X509_V_FLAG_USE_DELTAS
|
|
Packit |
b893dc |
- Net::SSLeay::X509_V_OK
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_COMPAT
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_DN_REV
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_DUMP_UNKNOWN_FIELDS
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_FN_ALIGN
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_FN_LN
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_FN_MASK
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_FN_NONE
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_FN_OID
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_FN_SN
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_MULTILINE
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_ONELINE
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_RFC2253
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_SEP_COMMA_PLUS
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_SEP_CPLUS_SPC
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_SEP_MASK
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_SEP_MULTILINE
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_SEP_SPLUS_SPC
|
|
Packit |
b893dc |
- Net::SSLeay::XN_FLAG_SPC_EQ
|
|
Packit |
b893dc |
A number of tests were present in svn, but missing from MANIFEST, and
|
|
Packit |
b893dc |
were therefore not included in the dist. Added.
|
|
Packit |
b893dc |
NEWLY INTRODUCED FUNCTIONS:
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_INTEGER_free
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_INTEGER_get
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_INTEGER_new
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_INTEGER_set
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKEY_assign_RSA
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKEY_bits
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKEY_free
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKEY_new
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_PKEY_size
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_get_cipherbyname
|
|
Packit |
b893dc |
- Net::SSLeay::OPENSSL_add_all_algorithms_conf
|
|
Packit |
b893dc |
- Net::SSLeay::OPENSSL_add_all_algorithms_noconf
|
|
Packit |
b893dc |
- Net::SSLeay::OpenSSL_add_all_algorithms
|
|
Packit |
b893dc |
- Net::SSLeay::PEM_get_string_PrivateKey
|
|
Packit |
b893dc |
- Net::SSLeay::PEM_get_string_X509_CRL
|
|
Packit |
b893dc |
- Net::SSLeay::PEM_get_string_X509_REQ
|
|
Packit |
b893dc |
- Net::SSLeay::PEM_read_bio_PrivateKey
|
|
Packit |
b893dc |
- Net::SSLeay::PEM_read_bio_X509
|
|
Packit |
b893dc |
- Net::SSLeay::PEM_read_bio_X509_REQ
|
|
Packit |
b893dc |
- Net::SSLeay::P_ASN1_INTEGER_get_dec
|
|
Packit |
b893dc |
- Net::SSLeay::P_ASN1_INTEGER_get_hex
|
|
Packit |
b893dc |
- Net::SSLeay::P_ASN1_INTEGER_set_dec
|
|
Packit |
b893dc |
- Net::SSLeay::P_ASN1_INTEGER_set_hex
|
|
Packit |
b893dc |
- Net::SSLeay::P_ASN1_STRING_get
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_CRL_add_revoked_serial_hex
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_CRL_get_serial
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_CRL_set_serial
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_REQ_add_extensions
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_REQ_get_attr
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_add_extensions
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_copy_extensions
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_get_crl_distribution_points
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_get_ext_key_usage
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_get_key_usage
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_get_netscape_cert_type
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_get_pubkey_alg
|
|
Packit |
b893dc |
- Net::SSLeay::P_X509_get_signature_alg
|
|
Packit |
b893dc |
- Net::SSLeay::P_PKCS12_load_file
|
|
Packit |
b893dc |
- Net::SSLeay::X509V3_EXT_print
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_digest
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_free
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_get_issuer
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_get_lastUpdate
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_get_nextUpdate
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_get_version
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_new
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_set_issuer_name
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_set_lastUpdate
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_set_nextUpdate
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_set_version
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_sign
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_sort
|
|
Packit |
b893dc |
- Net::SSLeay::X509_CRL_verify
|
|
Packit |
b893dc |
- Net::SSLeay::X509_EXTENSION_get_critical
|
|
Packit |
b893dc |
- Net::SSLeay::X509_EXTENSION_get_data
|
|
Packit |
b893dc |
- Net::SSLeay::X509_EXTENSION_get_object
|
|
Packit |
b893dc |
- Net::SSLeay::X509_NAME_ENTRY_get_data
|
|
Packit |
b893dc |
- Net::SSLeay::X509_NAME_ENTRY_get_object
|
|
Packit |
b893dc |
- Net::SSLeay::X509_NAME_add_entry_by_NID
|
|
Packit |
b893dc |
- Net::SSLeay::X509_NAME_add_entry_by_OBJ
|
|
Packit |
b893dc |
- Net::SSLeay::X509_NAME_add_entry_by_txt
|
|
Packit |
b893dc |
- Net::SSLeay::X509_NAME_cmp
|
|
Packit |
b893dc |
- Net::SSLeay::X509_NAME_digest
|
|
Packit |
b893dc |
- Net::SSLeay::X509_NAME_entry_count
|
|
Packit |
b893dc |
- Net::SSLeay::X509_NAME_get_entry
|
|
Packit |
b893dc |
- Net::SSLeay::X509_NAME_print_ex
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_add1_attr_by_NID
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_digest
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_free
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_get_attr_by_NID
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_get_attr_by_OBJ
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_get_attr_count
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_get_pubkey
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_get_subject_name
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_get_version
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_new
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_set_pubkey
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_set_subject_name
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_set_version
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_sign
|
|
Packit |
b893dc |
- Net::SSLeay::X509_REQ_verify
|
|
Packit |
b893dc |
- Net::SSLeay::X509_certificate_type
|
|
Packit |
b893dc |
- Net::SSLeay::X509_digest
|
|
Packit |
b893dc |
- Net::SSLeay::X509_get_ext_count
|
|
Packit |
b893dc |
- Net::SSLeay::X509_get_pubkey
|
|
Packit |
b893dc |
- Net::SSLeay::X509_get_serialNumber
|
|
Packit |
b893dc |
- Net::SSLeay::X509_get_version
|
|
Packit |
b893dc |
- Net::SSLeay::X509_issuer_and_serial_hash
|
|
Packit |
b893dc |
- Net::SSLeay::X509_issuer_name_hash
|
|
Packit |
b893dc |
- Net::SSLeay::X509_new
|
|
Packit |
b893dc |
- Net::SSLeay::X509_pubkey_digest
|
|
Packit |
b893dc |
- Net::SSLeay::X509_set_issuer_name
|
|
Packit |
b893dc |
- Net::SSLeay::X509_set_pubkey
|
|
Packit |
b893dc |
- Net::SSLeay::X509_set_serialNumber
|
|
Packit |
b893dc |
- Net::SSLeay::X509_set_subject_name
|
|
Packit |
b893dc |
- Net::SSLeay::X509_set_version
|
|
Packit |
b893dc |
- Net::SSLeay::X509_sign
|
|
Packit |
b893dc |
- Net::SSLeay::X509_subject_name_hash
|
|
Packit |
b893dc |
- Net::SSLeay::X509_verify
|
|
Packit |
b893dc |
- Net::SSLeay::d2i_X509_CRL_bio
|
|
Packit |
b893dc |
- Net::SSLeay::d2i_X509_REQ_bio
|
|
Packit |
b893dc |
- Net::SSLeay::d2i_X509_bio
|
|
Packit |
b893dc |
- Net::SSLeay::set_tlsext_host_name
|
|
Packit |
b893dc |
- Net::SSLeay::CTX_set_next_protos_advertised_cb
|
|
Packit |
b893dc |
- Net::SSLeay::CTX_set_next_proto_select_cb
|
|
Packit |
b893dc |
- Net::SSLeay::P_next_proto_negotiated
|
|
Packit |
b893dc |
- Net::SSLeay::P_next_proto_last_status
|
|
Packit |
b893dc |
Fixed a problem with multiple Safefree of GLOBAL_openssl_mutex when run
|
|
Packit |
b893dc |
under apache2+mod_perl on recent Debain distros. Removed END and
|
|
Packit |
b893dc |
openssl_threads_cleanup() since they can be called during thread
|
|
Packit |
b893dc |
destruction, and not necessarily at process exit time.
|
|
Packit |
b893dc |
Added missing helper_script/regen_openssl_constants.pl to MANIFEST. Add
|
|
Packit |
b893dc |
MANIFEST to svn.
|
|
Packit |
b893dc |
Fixed reported errors about try to plan twice in 21_constants.t on some platforms.
|
|
Packit |
b893dc |
Removed MANIFEST from svn, improve possibility to use Module::Install in Net-SSleay
|
|
Packit |
b893dc |
distribution in usual way. new target for make manifest
|
|
Packit |
b893dc |
Fix 2 issues with CTX_use_PKCS12_file
|
|
Packit |
b893dc |
1/ leaking memory - missing EVP_PKEY_free + X509_free
|
|
Packit |
b893dc |
2/ pkcs12 filesize limitation
|
|
Packit |
b893dc |
Fixed problems with regenerating scripts in Makefile.PL
|
|
Packit |
b893dc |
Added missing dependencies for SSLeay.o to Makefile.PL
|
|
Packit |
b893dc |
Added missing test files to svn
|
|
Packit |
b893dc |
Fixed calling convention for Net::SSLeay::get_shared_ciphers + test + doc update
|
|
Packit |
b893dc |
Added coding guidelines to SSLeay.xs
|
|
Packit |
b893dc |
Fix for serial number issue.
|
|
Packit |
b893dc |
Major patch to refactor callback code to make it more extensible and
|
|
Packit |
b893dc |
remove duplicate code. Thanks to kmx.
|
|
Packit |
b893dc |
Fixed a problem in t/local/07_sslecho.t when running on
|
|
Packit |
b893dc |
openssl-0.9.6
|
|
Packit |
b893dc |
Fixed pod parsing errors reported by Olivier Mengué
|
|
Packit |
b893dc |
Better prevention of leaking SVs in the new callback stuff
|
|
Packit |
b893dc |
Debug messages in SSLeay.xs can be enabled by: perl Makefile.PL DEFINE=-DSHOW_XS_DEBUG
|
|
Packit |
b893dc |
Fixing X509_NAME_oneline (calling OPENSSL_free at the right place)
|
|
Packit |
b893dc |
Fixed a problem with crashing when run under apache2+modssl+modperl on
|
|
Packit |
b893dc |
Debian Wheezy. Now detects if it is running under ModPerl and uses ModSSLs
|
|
Packit |
b893dc |
thread locking instead.
|
|
Packit |
b893dc |
Added more debg printing. Enable with
|
|
Packit |
b893dc |
perl Makefile.PL DEFINE=-DSHOW_XS_DEBUG
|
|
Packit |
b893dc |
Added NPN support, thanks to kmx
|
|
Packit |
b893dc |
Added t/local/40_npn_support.t tests for new NPN support
|
|
Packit |
b893dc |
Fixed some compiler warnings. Courtesy kmx.
|
|
Packit |
b893dc |
Fixed a problem with Win32 detection. Courtesy kmx.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.45 2012-02-25
|
|
Packit |
b893dc |
Added mising doc for SESSION_cmp. Patch by paul.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.44 2012-02-25
|
|
Packit |
b893dc |
Added missing t/data/binary-test.file to MANIFEST
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.43 2012-02-24
|
|
Packit |
b893dc |
Fixed some typos. Patched by Neil Bowers.
|
|
Packit |
b893dc |
SSLeay.pm convenience functions now call Net::SSLeay::initialize that
|
|
Packit |
b893dc |
initializes the SSL library at most once.
|
|
Packit |
b893dc |
Patch from kmx to protect SSLeay_add_ssl_algorithms from multiple loads
|
|
Packit |
b893dc |
and reentrancy in multi-threaded perls.
|
|
Packit |
b893dc |
Patch from kmx to add reentrancy protection for callbacks in
|
|
Packit |
b893dc |
multithreading.
|
|
Packit |
b893dc |
Updated ppport.h, fixed some complaints from ppport.h
|
|
Packit |
b893dc |
Fixed a problem with CTX_use_PKCS12_file on Windows, since the file was
|
|
Packit |
b893dc |
not opened in binary mode. Reported by kmx.
|
|
Packit |
b893dc |
Added resources line for SVN repository to Makefile. Suggested by kmx.
|
|
Packit |
b893dc |
Fixed complaints unders some windows compilers about cast from pointer to integer of
|
|
Packit |
b893dc |
different size. Suggested by kmx.
|
|
Packit |
b893dc |
Added thread safety and dynamic locking. This should complete thread
|
|
Packit |
b893dc |
safety work, making Net::SSLeay completely thread-safe. Patches by kind
|
|
Packit |
b893dc |
assistance of kmx.
|
|
Packit |
b893dc |
Improvements to openssl backwards compatibility. Now build with versions
|
|
Packit |
b893dc |
back to 0.9.6. With extreme thanks to kmx.
|
|
Packit |
b893dc |
Improvements to documentation, thanks to kmx.
|
|
Packit |
b893dc |
SUMMARY OF NEWLY INTRODUCED FUNCTIONS:
|
|
Packit |
b893dc |
- Net::SSLeay::initialize
|
|
Packit |
b893dc |
- Net::SSLeay::SSLeay
|
|
Packit |
b893dc |
- Net::SSLeay::SSLeay_version
|
|
Packit |
b893dc |
- Net::SSLeay::CIPHER_get_name
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_TIME_new
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_TIME_free
|
|
Packit |
b893dc |
- Net::SSLeay::ASN1_TIME_set
|
|
Packit |
b893dc |
- Net::SSLeay::P_ASN1_TIME_get_isotime
|
|
Packit |
b893dc |
- Net::SSLeay::P_ASN1_TIME_set_isotime
|
|
Packit |
b893dc |
- Net::SSLeay::P_ASN1_TIME_put2string
|
|
Packit |
b893dc |
- Net::SSLeay::OpenSSL_add_all_digests
|
|
Packit |
b893dc |
- Net::SSLeay::P_EVP_MD_list_all
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_get_digestbyname
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_MD_type
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_MD_size
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_MD_CTX_md
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_MD_CTX_create
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_MD_CTX_destroy
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_DigestInit
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_DigestInit_ex
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_DigestUpdate
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_DigestFinal
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_DigestFinal_ex
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_Digest
|
|
Packit |
b893dc |
- Net::SSLeay::SHA1
|
|
Packit |
b893dc |
- Net::SSLeay::SHA256
|
|
Packit |
b893dc |
- Net::SSLeay::SHA512
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_sha1
|
|
Packit |
b893dc |
- Net::SSLeay::EVP_sha512
|
|
Packit |
b893dc |
Fixed a problem with set_proxy where the password was not properly
|
|
Packit |
b893dc |
set. The code to do this went missing at some stage. Reported by Ulrich
|
|
Packit |
b893dc |
Weber via RT.
|
|
Packit |
b893dc |
Further improvements to testing time functions.
|
|
Packit |
b893dc |
Added t/local/37_asn1_time.t
|
|
Packit |
b893dc |
Added various digest functions, documentation and tests
|
|
Packit |
b893dc |
Removed debug from P_ASN1_TIME_get_isotime. Courtesy kmx.
|
|
Packit |
b893dc |
Remove unnecessary warnings about Random number generator not
|
|
Packit |
b893dc |
seeded. Courtesy kmx.
|
|
Packit |
b893dc |
Fixed an error in 04_basic.t triggered if Test::Exception not present.
|
|
Packit |
b893dc |
Added documentation for many CTX_ functions. Courtesy kmx.
|
|
Packit |
b893dc |
Fixed mionor typos in SSLeay.xs. Courtesy kmx.
|
|
Packit |
b893dc |
Moved documentation to new lib/Net/SSLeay.pod. Courtesy kmx.
|
|
Packit |
b893dc |
Additions to documentation in pod. Courtesy kmx.
|
|
Packit |
b893dc |
Fixed some incorrect return types from SSL_set_options
|
|
Packit |
b893dc |
SSL_CTX_set_options. Courtesy kmx.
|
|
Packit |
b893dc |
Further documentation in pod. Courtesy kmx.
|
|
Packit |
b893dc |
Small fixes to XS code + one new trivial function SSL_CIPHER_get_name
|
|
Packit |
b893dc |
And one more thing - 02_pod_coverage.t is turned ON passing all tests -
|
|
Packit |
b893dc |
never ever allow a new function without at least a short doc. Courtesy
|
|
Packit |
b893dc |
kmx.
|
|
Packit |
b893dc |
Removed 2 unnecessary 'local $[;' from SSLeay.pm
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.42 2011-10-03
|
|
Packit |
b893dc |
Fixed incorrect documentation of how to enable CRL checking. Patched
|
|
Packit |
b893dc |
by Steffen_Ullrich.
|
|
Packit |
b893dc |
Fixed incorrect letter in Sebastien in Credits. Patch by Neil Bowers.
|
|
Packit |
b893dc |
Reversed order of the Changes file to be reverse chronological. Patch by
|
|
Packit |
b893dc |
Neil Bowers.
|
|
Packit |
b893dc |
Fixed a a compile error when building on Windows with MSVC6. reported and
|
|
Packit |
b893dc |
patched by "Andrew J. Savige via RT".
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.41 2011-09-25
|
|
Packit |
b893dc |
Fixed incorrect const signatures for 1.0 that were causing warnings.
|
|
Packit |
b893dc |
Patches provided by "Douglas
|
|
Packit |
b893dc |
Christopher Wilson via RT". Now have clean compile with 0.9.8a through 1.0.0.
|
|
Packit |
b893dc |
1.40 2011-09-23
|
|
Packit |
b893dc |
Fixed incorrect argument type in call to SSL_set1_param
|
|
Packit |
b893dc |
Fixed a number of issues with pointer sizes, patched by "Douglas
|
|
Packit |
b893dc |
Christopher Wilson via RT". Removed redundant pointer cast tests from t/
|
|
Packit |
b893dc |
Added Perl version requirements to SSLeay.pm
|
|
Packit |
b893dc |
1.39 2011-09-21
|
|
Packit |
b893dc |
Downgraded Module::Install to 0.93 since 1.01 was causing problems in
|
|
Packit |
b893dc |
the Makefile. Reported by Albert Chin.
|
|
Packit |
b893dc |
1.38 2011-09-16
|
|
Packit |
b893dc |
- Fixed a problem with various symbols that only became
|
|
Packit |
b893dc |
available in OpenSSL 0.9.8 such as X509_VERIFY_PARAM and
|
|
Packit |
b893dc |
X509_POLICY_NODE, causing build failures with older versions of
|
|
Packit |
b893dc |
OpenSSL. Patched by paul.
|
|
Packit |
b893dc |
1.37 2011-09-16
|
|
Packit |
b893dc |
- Added X509_get_fingerprint, contributed by Thierry Walrant (with
|
|
Packit |
b893dc |
minor changes die to the fact that stricmp is not avialable. Cert
|
|
Packit |
b893dc |
types must be lowercase. Also added test to 07_sslecho.t
|
|
Packit |
b893dc |
- Added suport for SSL_CTX_set1_param, SSL_set1_param,
|
|
Packit |
b893dc |
selected X509_VERIFY_PARAM_* OBJ_* functions. Added new test
|
|
Packit |
b893dc |
t/local/36_verify.t
|
|
Packit |
b893dc |
- Fixed the prototype for randomize(), it missed one arg, and errors
|
|
Packit |
b893dc |
are reported with perl 5.10.1 on Windows
|
|
Packit |
b893dc |
- Fixed an uninitialized value warning in $Net::SSLeay::proxyauth,
|
|
Packit |
b893dc |
reported by Andrey Rikov.
|
|
Packit |
b893dc |
- Update so net-ssleay will compile if SSLV2 is not present. Patch
|
|
Packit |
b893dc |
from Chris Butler.
|
|
Packit |
b893dc |
- Fixed a problem where sslcat (and possibly other functions) expect RSA keys and will not
|
|
Packit |
b893dc |
load DSA keys for client certificates. Reported and patched by "Jesse
|
|
Packit |
b893dc |
DeFer via RT"
|
|
Packit |
b893dc |
- Removed SSL_CTX_v2_new and SSLv2_method() for OpenSSL 1.0 and later.
|
|
Packit |
b893dc |
- Added CTX_use_PKCS12_file contributed by "Andrew A. Budkin".
|
|
Packit |
b893dc |
1.36 30.01.2010
|
|
Packit |
b893dc |
- Fix problems with building on GNU/kFreeBSD, to do with use of pack
|
|
Packit |
b893dc |
instread of sockaddr_in. Patched by Debian Perl Group. (Closes RT#40144)
|
|
Packit |
b893dc |
- Fixed a compile problem in t/local/ptr_cast_test.c for some gcc
|
|
Packit |
b893dc |
versions. Reported by "Ryan McGuigan via RT". (Closes RT#52525)
|
|
Packit |
b893dc |
- Improved OpenSSL detection on Win32/strawberry perl. Patch provided
|
|
Packit |
b893dc |
by kmx. (Closes RT#49287)
|
|
Packit |
b893dc |
- Fix test failures on some 64-bit platforms. (Closes RT#53585)
|
|
Packit |
b893dc |
- Make X509_NAME_get_text_by_NID return its result without a trailing NUL.
|
|
Packit |
b893dc |
Patched by Steffen Ullrich. (Closes RT#35754)
|
|
Packit |
b893dc |
- SSL_set_session_secret_cb required for EAP-FAST is now enabled for both
|
|
Packit |
b893dc |
SSL_F_SSL_SET_HELLO_EXTENSION and
|
|
Packit |
b893dc |
SSL_F_SSL_SET_SESSION_TICKET_EXT. The name of this #define
|
|
Packit |
b893dc |
changed after 0.9.8i. SSL_set_hello_extension is not available after
|
|
Packit |
b893dc |
0.9.8i.
|
|
Packit |
b893dc |
- Added SSL_CTX_get_client_CA_list sk_X509_NAME_free sk_X509_NAME_num
|
|
Packit |
b893dc |
sk_X509_NAME_value SSL_get_client_CA_list, from patch provided by
|
|
Packit |
b893dc |
Joerg Schneider
|
|
Packit |
b893dc |
- Added EVP_add_digest and EVP_sha256 (if available)
|
|
Packit |
b893dc |
- Improve documentation on callback functions.
|
|
Packit |
b893dc |
- Stop looping forever when writing to broken connections. Patched by
|
|
Packit |
b893dc |
Martin Mares. (Closes RT#44170)
|
|
Packit |
b893dc |
- Patches from "Martijn van Beers via RT" to add SSL_SENT_SHUTDOWN
|
|
Packit |
b893dc |
and SSL_RECEIVED_SHUTDOWN, remove broken URLs,
|
|
Packit |
b893dc |
and to fix some documentation issues.
|
|
Packit |
b893dc |
- Various changes to build with OpenSSL 1.0 beta1:
|
|
Packit |
b893dc |
SSL_SESSION_cmp has been removed
|
|
Packit |
b893dc |
return type of SSL_CTX_sessions changed in an ugly way
|
|
Packit |
b893dc |
- Fixed a build problem reported by SISYPHUS:
|
|
Packit |
b893dc |
On Windows Vista64, ActivePerl 5.10.0 (build 1004, x64), running 'nmake
|
|
Packit |
b893dc |
test', the process hangs forever when it comes to building the test
|
|
Packit |
b893dc |
executable (as the executable fails to build).
|
|
Packit |
b893dc |
- Applied patch from ecmenifee in to improve handling of errors in
|
|
Packit |
b893dc |
ssl_write_all. (Closes RT#48132)
|
|
Packit |
b893dc |
- Patch to permit compile and testing on OS/2 submitted by Ilya
|
|
Packit |
b893dc |
Zakharevich.
|
|
Packit |
b893dc |
- Fixed compile problems with openssl-1.0.0-beta3 due to MD2 now being
|
|
Packit |
b893dc |
optional. Reported by paul [...] city-fan.org.
|
|
Packit |
b893dc |
- Fixed compile problems with openssl-0.9.7 and earlier with undefined
|
|
Packit |
b893dc |
symbol EVP_sha256. Reported by paul [...] city-fan.org.
|
|
Packit |
b893dc |
- Fixed a typo reported by Dan Dascalescu.
|
|
Packit |
b893dc |
- added RIPEMD160 digest function. Patch provided by dkg.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.35 25.07.2008
|
|
Packit |
b893dc |
- Fix test plan for autoload.t if Test::Exception isn't available.
|
|
Packit |
b893dc |
- Skip rsa_generate_key.t if Test::Exception isn't available.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.34 24.07.2008
|
|
Packit |
b893dc |
- Fixed problem with X509_get_subjectAltNames, where some types of Alt
|
|
Packit |
b893dc |
Name (eg DIRNAMEs) were not properly handled, resulting in seg faults.
|
|
Packit |
b893dc |
Reported by Achim Grolms.
|
|
Packit |
b893dc |
- Added support for ENGINE_load_builtin_engines and
|
|
Packit |
b893dc |
ENGINE_register_all_complete in order to enable built-in OpenSSL
|
|
Packit |
b893dc |
crypto engines for hardware acceleration etc.
|
|
Packit |
b893dc |
- Added support for ENGINE_by_id and ENGINE_set_default, required
|
|
Packit |
b893dc |
to enable Sun crypto acceleration
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.33_01 14.02.2008
|
|
Packit |
b893dc |
- Fixed a compile problem with inc_paths /usr/kerberos/include
|
|
Packit |
b893dc |
in inc/Module/Install/PRIVATE/Net/SSLeay.pm. Reported by "J. Nick
|
|
Packit |
b893dc |
Koston via RT"
|
|
Packit |
b893dc |
- Added optional support for SSL_set_hello_extension,
|
|
Packit |
b893dc |
SSL_set_session_secret_cb to support various extension patches from
|
|
Packit |
b893dc |
a patch to openssl-0.9.9-dev contributed by Jouni Malinen.
|
|
Packit |
b893dc |
See wpa_supplicant/patches/openssl-0.9.9-session-ticket.patch in the
|
|
Packit |
b893dc |
latest (git) version 0.6 and later of wpa_suplicant at
|
|
Packit |
b893dc |
http://hostap.epitest.fi/. These additions are ifdefed to
|
|
Packit |
b893dc |
SSL_F_SSL_SET_HELLO_EXTENSION which is added by the patch
|
|
Packit |
b893dc |
Tested with openssl-SNAP-20070816.
|
|
Packit |
b893dc |
- Added SSL_SESSION_set_master_key and SSL_get_keyblock_size.
|
|
Packit |
b893dc |
- Added all SSL_OP_* options flags present in 0.9.9
|
|
Packit |
b893dc |
- Fixed a bug in SSL_set_tmp_dh
|
|
Packit |
b893dc |
- Doc improvements in README.Win32
|
|
Packit |
b893dc |
- Fixed a problem with proxy connections: open_proxy_tcp_connection
|
|
Packit |
b893dc |
was stopping after the first \n from the proxy,
|
|
Packit |
b893dc |
but instead should have looked for
|
|
Packit |
b893dc |
$CRLF . $CRLF to find the beginning of the SSL content
|
|
Packit |
b893dc |
- Fixed missing / on /usr/kerberos/include, reported by several people
|
|
Packit |
b893dc |
- removed bacus.pt from host list in t/handle/external/10_destroy.t,
|
|
Packit |
b893dc |
since it seems no longer to respond. Reported by tco2.
|
|
Packit |
b893dc |
- changed t/handle/external/10_destroy.t so this list of URIs to be
|
|
Packit |
b893dc |
tested can be configured with environment variable SSLEAY_URIS, a
|
|
Packit |
b893dc |
colon separated list of host names. Suggested by tco2.
|
|
Packit |
b893dc |
- changed t/handle/external/50_external.t and t/external/08_external.t
|
|
Packit |
b893dc |
so this list of sites to be
|
|
Packit |
b893dc |
tested can be configured with environment variable SSLEAY_SITES, a
|
|
Packit |
b893dc |
colon separated list of host names. Suggested by tco2.
|
|
Packit |
b893dc |
- Fixed doucumentation in README of how to use OPENSSL_PREFIX
|
|
Packit |
b893dc |
environment variable to control the location of openssl. Reported by
|
|
Packit |
b893dc |
"Quanah Gibson-Mount via RT".
|
|
Packit |
b893dc |
- Don't use Module::Installs auto_install.
|
|
Packit |
b893dc |
- Bind NID_ and GEN_ constants.
|
|
Packit |
b893dc |
- Default to not running external tests.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.32 03.08.2007
|
|
Packit |
b893dc |
- Don't let the tests die when something unexpected happens. Just BAIL_OUT.
|
|
Packit |
b893dc |
- Some Win32 improvements.
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.31_02 14.07.2007
|
|
Packit |
b893dc |
- Fix linking problems on Windows. Tested with VC++ 6.0, Shining Light
|
|
Packit |
b893dc |
0.9.7L on Windows Server 2003 with ActivePerl 5.8.8.820. Also tested
|
|
Packit |
b893dc |
with OpenSSL 0.9.8e compiled from source.
|
|
Packit |
b893dc |
- Unable to get working systems when compiling with MS Visual Studio
|
|
Packit |
b893dc |
Express 2005. Contributions requested. This may be relevant:
|
|
Packit |
b893dc |
http://www.itwriting.com/blog/?postid=261&replyto=2542
|
|
Packit |
b893dc |
- Fixed a number of minor compile warnings on Windows
|
|
Packit |
b893dc |
- Updated README.Win32 to define building procedures on Windows
|
|
Packit |
b893dc |
- Fixed incorrect test failure reports in 08_external.
|
|
Packit |
b893dc |
- Add parens to function calls in Makefile.PL to prevent
|
|
Packit |
b893dc |
warnings with some perls.
|
|
Packit |
b893dc |
- Tested on Sparc Solaris 8, Sparc Solaris 10, OpenSuSE 10.2 x64,
|
|
Packit |
b893dc |
OpenSuSE 10.0 x86, FreeBSD 6.0 x86, Ubuntu 6.10, Fedora Core 6 x86
|
|
Packit |
b893dc |
- Changed type of SSL_set_info_callback args to stop compiler warnings
|
|
Packit |
b893dc |
on Windows
|
|
Packit |
b893dc |
- Removed auto_include from Makefile.PL
|
|
Packit |
b893dc |
- Removed build_requires('Test::NoWarnings') from Makefile.PL
|
|
Packit |
b893dc |
- Testing with Strawberry Perl on Windows XP SP2, added doc to
|
|
Packit |
b893dc |
README.Win32
|
|
Packit |
b893dc |
- Testing with Perl CamelPack 5.8.7 on Windows XP SP2,added doc to
|
|
Packit |
b893dc |
README.Win32
|
|
Packit |
b893dc |
- Added optional support for SSL_set_hello_extension,
|
|
Packit |
b893dc |
SSL_set_session_secret_cb to support various extension patches from
|
|
Packit |
b893dc |
a patch to openssl-0.9.9-dev contributed by Jouni Malinen.
|
|
Packit |
b893dc |
See wpa_supplicant/patches/openssl-0.9.9-session-ticket.patch in the
|
|
Packit |
b893dc |
latest (git) version 0.6 and later of wpa_suplicant at
|
|
Packit |
b893dc |
http://hostap.epitest.fi/. These additions are ifdefed to
|
|
Packit |
b893dc |
SSL_F_SSL_SET_HELLO_EXTENSION which is added by the patch
|
|
Packit |
b893dc |
Tested with openssl-SNAP-20070816.
|
|
Packit |
b893dc |
- Added SSL_SESSION_set_master_key and SSL_get_keyblock_size.
|
|
Packit |
b893dc |
- Added all SSL_OP_* options flags present in 0.9.9
|
|
Packit |
b893dc |
- Fixed a bug in SSL_set_tmp_dh
|
|
Packit |
b893dc |
- Doc improvements in README.Win32
|
|
Packit |
b893dc |
1.31_01 02.07.2007
|
|
Packit |
b893dc |
- Only bind X509_STORE_set_trust #if OPENSSL_VERSION_NUMBER >= 0x0090800fL
|
|
Packit |
b893dc |
- Removed %Filenum_Objects from Net::SSLeay::Handle so unused handles will be freed.
|
|
Packit |
b893dc |
- Use ppport.h.
|
|
Packit |
b893dc |
- improved openssl path guessing, forcing openssl path now
|
|
Packit |
b893dc |
requires the -path flag (caution: incompatible flag change)
|
|
Packit |
b893dc |
Path guessing works on windows too.
|
|
Packit |
b893dc |
mikem, with patches from Stas Bekman
|
|
Packit |
b893dc |
- Added /usr/sfw/bin/openssl to path guessing for Open Solaris,
|
|
Packit |
b893dc |
suggested by Igor Boehme.
|
|
Packit |
b893dc |
- Fixed a problem with X509_get_subjectAltNames not working when the
|
|
Packit |
b893dc |
subjectAltNAmes are the first extension. Reported by Achim Grolms
|
|
Packit |
b893dc |
|
|
Packit |
b893dc |
1.30 21.12.2005
|
|
Packit |
b893dc |
- Fixed the MD5 function for hashsums containing \0
|
|
Packit |
b893dc |
- Fixed some compile warnings with recent gcc.
|
|
Packit |
b893dc |
- Fixed do_httpx3:
|
|
Packit |
b893dc |
+ Don't add additional Host: headers if it's already given
|
|
Packit |
b893dc |
+ Omit the :$port suffix for standard ports
|
|
Packit |
b893dc |
+ Thanks to ivan-cpan-rt@420.am
|
|
Packit |
b893dc |
- Limit the chunk size when reading with tcp_read_all to 0x1000.
|
|
Packit |
b893dc |
This fixes various rt tickets.
|
|
Packit |
b893dc |
- Added patch to allow session caching
|
|
Packit |
b893dc |
- Mike McCauley and Florian Ragwitz maintain this module now
|
|
Packit |
b893dc |
1.25 18.8.2003
|
|
Packit |
b893dc |
- added tcpecho.pl and tcpcat.pl to MANIFEST
|
|
Packit |
b893dc |
- fixed some further bugs with TCP read all, etc.
|
|
Packit |
b893dc |
- fixed some const char pointer warnings
|
|
Packit |
b893dc |
1.24 25.6.2003
|
|
Packit |
b893dc |
- write_partial() return value patch from
|
|
Packit |
b893dc |
Kim Minh Kaplan <kmkaplan@selfoffice._com>
|
|
Packit |
b893dc |
3.8.2003
|
|
Packit |
b893dc |
- applied version check fix to Net::SSLeay::Handle.pm
|
|
Packit |
b893dc |
from Jason Rhinelander <jason@gossamer-threads._com>
|
|
Packit |
b893dc |
17.8.2003
|
|
Packit |
b893dc |
- new features: http and raw tcp support
|
|
Packit |
b893dc |
- fixed apparent STDIO vs. sysread bug in proxy connect
|
|
Packit |
b893dc |
1.23 13.6.2003
|
|
Packit |
b893dc |
- some minor tweaks by many, mainly for RH build
|
|
Packit |
b893dc |
- memory leak and cleanup patches from Marian Jancar <mjancar@suse._cz>
|
|
Packit |
b893dc |
1.22 8.1.2003
|
|
Packit |
b893dc |
- proxy auth fix from Bill.Muller@@ubsw_..com
|
|
Packit |
b893dc |
18.2.2003
|
|
Packit |
b893dc |
- RAND patch from Toni Andjelkovic <toni@soth._at>
|
|
Packit |
b893dc |
1.21 6.9.2002
|
|
Packit |
b893dc |
- Patch by Mike McCauley mikem@open.com_.au
|
|
Packit |
b893dc |
19.9.2002
|
|
Packit |
b893dc |
- applied patch from Tim Engler <tim@burntcouch_.com>
|
|
Packit |
b893dc |
30.10.2002,
|
|
Packit |
b893dc |
- perl-5.8/gcc-3.2 patch on Makefile.PL from
|
|
Packit |
b893dc |
Joern_Hoos@@notes.uni-paderborn._de, lucho@@galix._com,
|
|
Packit |
b893dc |
bellis@@saberlogic._com, and simonclewer@@superquote._com
|
|
Packit |
b893dc |
1.20 16.8.2002
|
|
Packit |
b893dc |
- Additional patch by Peter Behroozi <peter@@fhpwireless_.com> --Sampo
|
|
Packit |
b893dc |
- Patch by Mike McCauley mikem@open.com_.au
|
|
Packit |
b893dc |
1.19 10.8.2002-16.8.2002
|
|
Packit |
b893dc |
- Added SSL_peek patch to ssl_read_until from
|
|
Packit |
b893dc |
Peter Behroozi <peter@@fhpwireless_.com> --Sampo
|
|
Packit |
b893dc |
- Improved Windows instructions per Marcel Bucher <marcle@bucher._cc>
|
|
Packit |
b893dc |
1.18 15.6.2002
|
|
Packit |
b893dc |
- applied minor patch by Mark Veltzer <mark@@veltzer._org> to Makefile.PL
|
|
Packit |
b893dc |
1.17 8.6.2002
|
|
Packit |
b893dc |
- further fixes for Net::SSLeay::Handle from jbowlin@@_linklint.org
|
|
Packit |
b893dc |
- improved README.Win32 and added RECIPE.Win32 from
|
|
Packit |
b893dc |
Hermann Kelley <hkelley@@secmon._com>
|
|
Packit |
b893dc |
1.16 17.4.2002-22.5.2002
|
|
Packit |
b893dc |
- applied patch to fix CTX_set_default_passwd_cb() contributed
|
|
Packit |
b893dc |
by Timo Kujala <timo.kujala@@intellitel_.com>, --Sampo
|
|
Packit |
b893dc |
- similar patch by Chris Ridd <chris.ridd@messagingdirect.com>
|
|
Packit |
b893dc |
- applied patch to add various API functions by mikem@open.com_.au
|
|
Packit |
b893dc |
- 5.005_03 compat fix for Handle.pm from Jim Mintha <jim@@ic._uva.nl>
|
|
Packit |
b893dc |
1.15 3.4.2002
|
|
Packit |
b893dc |
- added `use bytes' from Marcus Taylor <marcus@@semantico_.com>
|
|
Packit |
b893dc |
This avoids unicode/utf8 (as may appear in some XML docs)
|
|
Packit |
b893dc |
from fooling the length comuptations.
|
|
Packit |
b893dc |
- Dropped support for perl5.005_03 because I do not have opportunity
|
|
Packit |
b893dc |
to test it. --Sampo
|
|
Packit |
b893dc |
1.14 25.3.2002
|
|
Packit |
b893dc |
- added code to Makefile.PL to verify that the same C compiler
|
|
Packit |
b893dc |
is used for both perl and openssl
|
|
Packit |
b893dc |
- added code to Makefile.PL to support aCC on HPUX. Detective
|
|
Packit |
b893dc |
work contributed by Marko Asplund.
|
|
Packit |
b893dc |
- added peer certificate support to hilevel API, inspired
|
|
Packit |
b893dc |
by mock@@_obscurity.org
|
|
Packit |
b893dc |
1.13 13.2.2002
|
|
Packit |
b893dc |
- eliminated initializing random numbers using /etc/passwd per
|
|
Packit |
b893dc |
comments by Matt Messier <matt@@securesw_.com>
|
|
Packit |
b893dc |
- tested against openssl-0.9.6c
|
|
Packit |
b893dc |
1.12 6.1.2002
|
|
Packit |
b893dc |
- cosmetic fix to socket options from
|
|
Packit |
b893dc |
Kwindla Hultman Kramer <kwindla@@allafrica_.com>
|
|
Packit |
b893dc |
1.11 14.12.2001,
|
|
Packit |
b893dc |
- Added proxy support to Net::SSLeay::Handle, too
|
|
Packit |
b893dc |
1.10 7.12.2001,
|
|
Packit |
b893dc |
- Added proxy support by Bruno De Wolf <bruno.dewolf@@pandora._be>
|
|
Packit |
b893dc |
1.09 20.8.2001,
|
|
Packit |
b893dc |
- fixed Makefile.PL (computation of bin_path) and test.pl ($perl
|
|
Packit |
b893dc |
use before defined) per Gordon Lack <gml4410@@_ggr.co.uk>
|
|
Packit |
b893dc |
11.9.2001,
|
|
Packit |
b893dc |
- Patch by Jeremy Mates <jmates@@_mbt.washington.edu> to make Handle.pm
|
|
Packit |
b893dc |
more acceptable for older perls
|
|
Packit |
b893dc |
25.9.2001,
|
|
Packit |
b893dc |
- systematically implemented many of the newer functions of
|
|
Packit |
b893dc |
openssl API (per popular request and for completeness)
|
|
Packit |
b893dc |
1.08 25.4.2001,
|
|
Packit |
b893dc |
- applied 64 bit fixes by Marko Asplund <aspa@@kronodoc._fi>
|
|
Packit |
b893dc |
17.7.2001,
|
|
Packit |
b893dc |
- applied error codes and SSL_*_method patch by Noel Burton-Krahn
|
|
Packit |
b893dc |
<noel@burton-krahn.com> via aspa
|
|
Packit |
b893dc |
- warning cleanups by Jared Allison <jallison@@UU_.NET>
|
|
Packit |
b893dc |
- do last loop fixes from Jim Bowlin <bowlin@@_mindspring.com>
|
|
Packit |
b893dc |
- Fixed extra-newline-if-header-already-contained-newline problem
|
|
Packit |
b893dc |
reported by Sean McMurray <smcmurray@verio.net> (first reported by
|
|
Packit |
b893dc |
Yuao TANIGAWA <yuao@@_www.infosite.ne.jp> but not fixed by me back
|
|
Packit |
b893dc |
then for some reason, my bad)
|
|
Packit |
b893dc |
- Added ability to set client certificate for https_cat and sslcat
|
|
Packit |
b893dc |
as suggested by Avi Ben-Harush <avib@@_atomica.com>
|
|
Packit |
b893dc |
- created do_https2 with more rational calling sequence
|
|
Packit |
b893dc |
18.7.2001,
|
|
Packit |
b893dc |
- numerous windows oriented fixes from Eric A Selber
|
|
Packit |
b893dc |
<eselber@@_briefcase.com>
|
|
Packit |
b893dc |
- bumped OpenSSL version requirement to 0.9.6b and tested
|
|
Packit |
b893dc |
- merged in Net::SSLeay::Handle by Jim Bowlin <jbowlin@@_linklint.org>
|
|
Packit |
b893dc |
1.07 18.4.2001,
|
|
Packit |
b893dc |
- TLSv1 support by Stephen C. Koehler <koehler@@securecomputing_.com>
|
|
Packit |
b893dc |
1.06 7.4.2001, --Sampo
|
|
Packit |
b893dc |
- fixed ssl_read_all bug where `0' input was mistaken for EOF.
|
|
Packit |
b893dc |
- openssl-0.9.6a fixes (e.g. random number generator init)
|
|
Packit |
b893dc |
- various minor fixes subnitted by fellow netters (sorry, I lost track
|
|
Packit |
b893dc |
of your names so I do not name the contributors here)
|
|
Packit |
b893dc |
1.05 31.1.1999, --Sampo
|
|
Packit |
b893dc |
- fixed test cert creation (lack of symlinks, reported
|
|
Packit |
b893dc |
by schinder@@_pobox.com)
|
|
Packit |
b893dc |
- callbacks fixed and tested to work
|
|
Packit |
b893dc |
- added Authentication examples
|
|
Packit |
b893dc |
- added couple more X509_STORE_CTX family functions
|
|
Packit |
b893dc |
1.04 31.1.1999, Sampo Kellomaki <sampo@@_iki._fi>
|
|
Packit |
b893dc |
- Backward incompatible changes in OpenSSL API mean that 1.04 will
|
|
Packit |
b893dc |
drop support for SSLeay and all OpenSSL versions prior
|
|
Packit |
b893dc |
to 0.9.2b release. Thanks guys!
|
|
Packit |
b893dc |
- Detected errors in OpenSSL-0.9.2b/ssl/ssl.h - see patch in README
|
|
Packit |
b893dc |
- Reordered arguments of several functions to track OpenSSL-0.9.2b
|
|
Packit |
b893dc |
changes. This also changes the order of args in corresponding
|
|
Packit |
b893dc |
perl functions. You have been warned!
|
|
Packit |
b893dc |
- SSL_use_certificate_ASN1(s,d,len) // swapped d and len
|
|
Packit |
b893dc |
- WARNING: Possibly fatal verify_callback parameter list issue
|
|
Packit |
b893dc |
is still standing
|
|
Packit |
b893dc |
- cleaned up many macros that used to access ctx->session directly,
|
|
Packit |
b893dc |
OpenSSL-0.9.2b defines thes macros properly so I use them now.
|
|
Packit |
b893dc |
- Added SSL_ctrl() and SSL_CTX_ctrl()
|
|
Packit |
b893dc |
- Added SSL_get_options(), SSL_CTX_get_options(),
|
|
Packit |
b893dc |
SSL_CTX_set_cipher_list()
|
|
Packit |
b893dc |
- Removed SSL_add_session(), SSL_remove_session(),
|
|
Packit |
b893dc |
and SSL_flush_sessions() per #if 0 in ssl.h, line 667
|
|
Packit |
b893dc |
- Updated paths in various utility programs
|
|
Packit |
b893dc |
- Upgraded version number detection logic in Makefile.PL
|
|
Packit |
b893dc |
- Added -rsaref flag to Makefile.PL. This allows linking against rsaref
|
|
Packit |
b893dc |
30.7.1999, final squeeze to get this out --Sampo
|
|
Packit |
b893dc |
- upgrade to OpenSSL-0.9.3a
|
|
Packit |
b893dc |
- upper case all header names so keys of the hash returned
|
|
Packit |
b893dc |
from get_https are predictible
|
|
Packit |
b893dc |
- fixed get_https and post_https so they don't do shutdown
|
|
Packit |
b893dc |
anymore. This used to cause headaches when connection
|
|
Packit |
b893dc |
renegotiation happened.
|
|
Packit |
b893dc |
- applied ssl_read_CRLF patch by Clinton Wong <clintdw@@netcom._com>
|
|
Packit |
b893dc |
- ActivePerl diffs from anton@@_genua.de applied,
|
|
Packit |
b893dc |
but not tested.
|
|
Packit |
b893dc |
1.03 4.1.1999, Sampo Kellomaki <sampo@@iki._fi>
|
|
Packit |
b893dc |
- Merged URI encoding patch to make_form
|
|
Packit |
b893dc |
from Joe Rhett <jrhett@@navigist._com>
|
|
Packit |
b893dc |
- changed sslcat, ssl_read_all, ssl_write_all to return error messages
|
|
Packit |
b893dc |
as second member of list. Functions continue to behave the old way
|
|
Packit |
b893dc |
if scalar return value is used (they check this with wantarray).
|
|
Packit |
b893dc |
Change was suggested by Joe Rhett.
|
|
Packit |
b893dc |
- changed $trace levels so that 0 does not produce any output
|
|
Packit |
b893dc |
- changed get_https and put_https to fake error 900 in $response
|
|
Packit |
b893dc |
return field
|
|
Packit |
b893dc |
- changed print_errs and some other internals to return textual
|
|
Packit |
b893dc |
errors instead of error count
|
|
Packit |
b893dc |
- changed SSLeay.xs comments from #if 0 to #define REM. This will
|
|
Packit |
b893dc |
hopefully make it easier to compile with some vendor compilers
|
|
Packit |
b893dc |
- Added version detection code for OpenSSL-0.9.1c and checked
|
|
Packit |
b893dc |
build
|
|
Packit |
b893dc |
1.02 8.7.1998, Sampo Kellomaki <sampo@@iki._fi>
|
|
Packit |
b893dc |
- Added SSL_(CTX)?_set_options and associated constants
|
|
Packit |
b893dc |
- Slight clean-ups
|
|
Packit |
b893dc |
1.01 23.6.1998, Sampo Kellomaki <sampo@@iki_.fi>
|
|
Packit |
b893dc |
- made Makefile.PL check SSLeay version and to be more CPAN kosher
|
|
Packit |
b893dc |
- changed build instructions to build outside perl source tree
|
|
Packit |
b893dc |
- added random number initialization using /dev/urandom (if available)
|
|
Packit |
b893dc |
- made ssl_write_all accept references, this is more memory efficient
|
|
Packit |
b893dc |
1.00 19.6.1998, Sampo Kellomaki <sampo@@_iki.fi>
|
|
Packit |
b893dc |
- overhauled to SSLeay-0.9.0
|
|
Packit |
b893dc |
- renamed cat to sslcat
|
|
Packit |
b893dc |
- added lots of convenience functions, like get_https
|
|
Packit |
b893dc |
- added couple of X509 routines
|
|
Packit |
b893dc |
- improved tests and documentation
|
|
Packit |
b893dc |
- fixed callbacks (but found that old callbacks dont work)
|
|
Packit |
b893dc |
0.04 19.7.1996 Fixed some 0.6.1 incompatibilities, namely removed
|
|
Packit |
b893dc |
#include <ssl_locl.h>, fixed typo in SSL_get_cerificate, fixed
|
|
Packit |
b893dc |
the return type of the same. --Sampo
|
|
Packit |
b893dc |
0.03 Renamed everything Net::SSLeay
|
|
Packit |
b893dc |
0.02 Trial with SSL.pm name
|
|
Packit |
b893dc |
0.01 Thu Jun 27 03:56:00 1996
|
|
Packit |
b893dc |
- original version; created by h2xs 1.16
|
|
Packit |
b893dc |
#EOF
|