PaulHowarth/Blog/2014-05-10

Saturday 10th May 2014

Fedora Project

  • David Dick kindly reviewed and approved my perl-JSON-MaybeXS package

  • Updated perl-IO-Socket-SSL to 1.984 in Rawhide:

    • Added OCSP support:
      • Needs Net::SSLeay ≥ 1.59

      • For usage see documentation of IO::Socket::SSL (examples and anything with OCSP in the name)

    • New tool util/analyze-ssl.pl, which is intended to help in debugging of SSL problems and to get information about capabilities of server; it works also as an example of how to use various features (like OCSP, SNI...)

    • Fix peer_certificates (returns leaf certificate only once on client side)

    • Added timeout for stop_SSL (either with Timeout or with the default timeout for IO::Socket)

    • Fix IO::Socket::SSL::Utils mapping between ASN1_TIME and time_t when local time is not GMT; use Net::SSLeay::ASN1_TIME_timet if available

    • Fix t/external/usable_ca.t for system with junk in CA files

  • Updated perl-Net-SSLeay to 1.59 in Rawhide:

    • Fixed local/30_error.t so that tests do not fail if diagnostics are enabled

    • Fixed error messages about undefined strings used with length or split

    • Improvements to configuration of OPTIMIZE flags, to prevent overriding of perl's expected optimization flags

    • SSL_peek() now returns openssl error code as second item when called in array context, same as SSL_read

    • Fixed some warnings
    • Added support for tlsv1.1 and tlsv1.2 via $Net::SSLeay::ssl_version

    • Improve examples in 'Using other perl modules based on Net::SSLeay'
    • Added support for OCSP
    • Added missing t/external/ocsp.t

Local Packages

  • Updated curl to fix auth failure on duplicated 'WWW-Authenticate: Negotiate' header (Bug #1093348)

  • Updated perl-IO-Socket-SSL to 1.984 as per the Fedora version

  • Updated perl-Net-SSLeay to 1.59 as per the Fedora version

  • Updated perl-Perl-MinimumVersion to 1.36:

    • CHECK block requires 5.6.2

    • UNITCHECK block requires 5.10.0

    • Stacked labels on the same statement requires 5.14.0


Recent