Paul's Blog Entries for October 2017

Tuesday 3rd October 2017

Fedora Project

• Updated perl-Apache-Session-Browseable to 1.2.8 in F-27 and Rawhide:

  • Force UTF-8

• Updated perl-List-MoreUtils-XS to 0.426 in F-27 and Rawhide:

  • Fix broken format in part (GH#4)

  • Fix gcc 4.7 sequence point warning (GH#5)

  • Fix incorrect padname resolving for perl > 5.21.6 (CPAN RT#122883)

  • Fix compiling issue on CentOS 4 and CentOS 5

• Updated perl-Safe-Isa to 1.000008 in F-27 and Rawhide:

  • Fix scalar/list context handling for $_call_if_can

• Updated perl-Test-Simple to 1.302098 in F-27 and Rawhide:

  • Fix hub->process bug that could let an error pass

  • Fix modification of read only value (#789)

  • Fix typo in Test::Builder when looking for IPC (#777)

  • Fix clone_io broke on scalar io layer (#791)

  • Fix Exception event stringify exception (#756, #790)

  • Localize $^E in context (#780)

  • Fix test that failed in verbose mode (#770)

  • Add docs for test2_stdout and test2_stderr

  • Fix 5.6 support

Local Packages

• Updated perl-List-MoreUtils-XS to 0.426 as per the Fedora version

• Updated perl-Safe-Isa to 1.000008 as per the Fedora version

• Updated perl-Test-Simple to 1.302098 as per the Fedora version

Wednesday 4th October 2017

Local Packages

• Updated curl to 7.56.0:

  • curl: Enable compression for SCP/SFTP with --compressed-ssh

  • libcurl: Enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION

  • vtls: Added dynamic changing SSL backend with curl_global_sslset()

  • New MIME API, curl_mime_init() and friends

  • openssl: Initial SSLKEYLOGFILE implementation

  • FTP: zero terminate the entry path even on bad input (CVE-2017-1000254)

  • examples/ftpuploadresume.c: Use portable code

  • runtests: Match keywords case insensitively

  • travis: Build the examples too

  • strtoofft: Reduce integer overflow risks globally

  • zsh.pl: Produce a working completion script again

  • cmake: Remove dead code for CURL_DISABLE_RTMP

  • progress: Track total times following redirects

  • configure: Fix --disable-threaded-resolver

  • cmake: Remove dead code for DISABLED_THREADSAFE

  • configure: Fix clang version detection

  • darwinssl: Fix error: variable length array used

  • travis: Add metalink to some osx builds

  • configure: Check for __builtin_available() availability

  • http_proxy: Fix build error for CURL_DOES_CONVERSIONS

  • examples/ftpuploadresume: checksrc compliance

  • ftp: Fix CWD when doing multicwd then nocwd on same connection

  • system.h: Remove all CURL_SIZEOF_* defines

  • http: Don't wait on CONNECT when there is no proxy

  • system.h: Check for __ppc__ as well

  • http2_recv: Return error better on fatal h2 errors

  • scripts/contri*sh: Use "git log --use-mailmap"

  • tftp: Fix memory leak on too long filename

  • system.h: Fix build for hppa

  • cmake: Enable picky compiler options with clang and gcc

  • makefile.m32: Add support for libidn2

  • curl: Turn off MinGW CRT's globbing

  • request-target.d: Mention added in 7.55.0

  • curl: Shorten and clean up CA cert verification error message

  • imap: Support PREAUTH

  • CURLOPT_USERPWD.3: See also CURLOPT_PROXYUSERPWD

  • examples/threaded-ssl: Mention that this is for openssl before 1.1

  • winbuild: Fix embedded manifest option

  • tests: Make sure libtests and unittests call curl_global_cleanup()

  • system.h: include sys/poll.h for AIX

  • darwinssl: Handle long strings in TLS certs

  • strtooff: Fix build for systems with long long but no strtoll

  • asyn-thread: Improved clean-up after OOM situations

  • HELP-US.md: "How to get started helping out in the curl project"

  • curl.h: CURLSSLBACKEND_WOLFSSL used wrong value

  • unit1301: Fix error message on first test

  • ossfuzz: Moving towards the ideal integration

  • http: Fix a memory leakage in checkrtspprefix()

  • examples/post-callback: Stop returning one byte at a time

  • schannel: return CURLE_SSL_CACERT on failed verification

  • MAIL-ETIQUETTE: Added "1.9 Your emails are public"

  • http-proxy: Treat all 2xx as CONNECT success

  • openssl: Use OpenSSL's default ciphers by default

  • runtests.pl: Support attribute "nonewline" in part verify/upload

  • configure: Remove --enable-soname-bump and SONAME_BUMP

  • travis: Add c-ares enabled builds linux + osx

  • vtls: Fix WolfSSL 3.12 build problems

  • http-proxy: When not doing CONNECT, that phase is done immediately

  • configure: Fix curl_off_t check's include order

  • configure: Use -Wno-varargs on clang 3.9[.X] debug builds

  • rtsp: Do not call fwrite() with NULL pointer FILE *

  • mbedtls: Enable CA path processing

  • travis: Add build without HTTP/SMTP/IMAP

  • checksrc: Verify more code style rules

  • HTTP proxy: On connection re-use, still use the new remote port

  • tests: Add initial gssapi test using stub implementation

  • rtsp: Segfault when using WRITEDATA

  • docs: Clarify the CURLOPT_INTERLEAVE* options behaviour

  • non-ascii: Use iconv() with 'char **' argument

  • server/getpart: Provide dummy function to build conversion enabled

  • conversions: Fix several compiler warnings

  • openssl: Add missing includes

  • schannel: Support partial send for when data is too large

  • socks: Fix incorrect port number in SOCKS4 error message

  • curl: Fix integer overflow in timeout options

• Updated perl-Digest-SHA to 5.98:

  • Removed "portable" mode from shasum and addfile

    • Rarely used, mostly in outdated systems

    • Potentially confusing features (e.g. \r\r\n → \n)

    • Universal Newlines mode (-U) a much cleaner approach

    • Mimics Universal Newlines in Python

  • shasum now uses Digest::SHA explicitly

    • No longer loads Digest::SHA::PurePerl as an option

    • Hence no need for -R switch

    • Digest::SHA::PurePerl has its own shasum: shasumpp

• Updated perl-Term-Table to 0.010:

  • Further optimize term_size when SIGWINCH is supported

Thursday 5th October 2017

Local Packages

• Updated getmail to 5.2:

  • Disconnection during IMAP IDLE could result in an error message rather than silently exiting

Friday 6th October 2017

Local Packages

• Updated getmail to 5.3:

  • Another case where an error condition resulted in getmail not displaying the correct message

• Updated libxml2 to 2.9.6:

  • Bug fix update (see https://mail.gnome.org/archives/xml/2017-October/msg00003.html)

• Updated perl-Test-MockModule to 0.13:

  • Added the 'redefine()' function, which works just like 'mock()', except that if the method being mocked doesn't exist, it causes a panic

• Rebuilt perl-XML-LibXML (2.0129) for libxml2 2.9.6

Monday 9th October 2017

Fedora Project

• Updated GeoIP-GeoLite-data to the October 2017 databases in F-25, F-26, F-27 and Rawhide

• Updated gtkwave to 3.3.86 in F-27 and Rawhide:

  • Added recurse import function (found before only in the hier search) into the SST
  • Removed obsolete bundle functionality from SST as recurse import more accurately imports recursively

  • Made entrybox taller (using -1) as recent versions of gnome have taller window titlebars and the widget was not tall enough

• Updated perl-MCE to 1.831 in F-27 and Rawhide:

  • Added STFL (Terminal UI) to list for enabling posix_exit (see http://www.perlmonks.org/?node_id=1200923)

  • Math::Prime::Util random numbers now unique between MCE workers (see http://www.perlmonks.org/?node_id=1200960)

• Updated perl-MCE-Shared to 1.832 in F-27 and Rawhide:

  • Added STFL (Terminal UI) to list for enabling posix_exit (see http://www.perlmonks.org/?node_id=1200923)

  • Math::Prime::Util random numbers now unique between Hobo workers (see http://www.perlmonks.org/?node_id=1200960)

  • Bumped MCE dependency to 1.831

Local Packages

• Updated GeoIP-GeoLite-data to the October 2017 databases as per the Fedora version

• Updated getmail to 5.4:

  • Fix another error in logging an error condition

• Updated gtkwave to 3.3.86 as per the Fedora version

• Updated libxslt (1.1.30) to fix broken xslt-config script (Bug #1498539)

• Updated perl-MCE to 1.831 as per the Fedora version

• Updated perl-MCE-Shared to 1.832 as per the Fedora version

• Updated perl-Perl-Critic-Pulp to 95:

  • RequireFinalSemicolon: sort{} blocks are expressions

Tuesday 10th October 2017

Local Packages

• Updated perl-Term-Table to 0.011:

  • Honour the environment variable even on non-terminal output

Wednesday 11th October 2017

Fedora Project

• Updated perl-Test-Simple to 1.302100 in F-27 and Rawhide:

  • Fix run_subtest inherit_trace option

Local Packages

• Updated dovecot to 2.2.33:

  • doveadm director commands wait for the changes to be visible in the whole ring before they return; this is especially useful in testing

  • Environments listed in import_environment setting are now set or preserved when executing standalone commands (e.g. doveadm)

  • doveadm proxy: Support proxying logs; previously the logs were visible only in the backend's logs

  • Added %{if}; see https://wiki2.dovecot.org/Variables#Conditionals

  • Added a new notify_status plugin, which can be used to update dict with current status of a mailbox when it changes (see https://wiki2.dovecot.org/Plugins/NotifyStatus)

  • Mailbox list index can be disabled for a namespace by appending ":LISTINDEX=" to location setting

  • dsync/imapc: Added dsync_hashed_headers setting to specify which headers are used to match emails

  • pop3-migration: Add pop3_migration_ignore_extra_uidls=yes to ignore mails that are visible in POP3 but not IMAP; this could happen if new mails were delivered during the migration run

  • pop3-migration: Further improvements to help with Zimbra

  • pop3-migration: Cache POP3 UIDLs in imapc's dovecot.index.cache if indexes are enabled; these are used to optimize incremental syncs

  • cassandra, dict-sql: Use prepared statements if protocol version>3

  • auth: Added %{ldap_dn} variable for passdb/userdb ldap

  • acl: The "create" (k) permission in global acl-file was sometimes ignored, allowing users to create mailboxes when they shouldn't have

  • sdbox: Mails were always opened when expunging, unless mail_attachment_fs was explicitly set to empty

  • lmtp/doveadm proxy: hostip passdb field was ignored, which caused unnecessary DNS lookups if host field wasn't an IP

  • lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO

  • quota_clone: Update also when quota is unlimited (broken in v2.2.31)

  • mbox, zlib: Fix assert-crash when accessing compressed mbox

  • doveadm director kick -f parameter didn't work

  • doveadm director flush <host> resulted flushing all hosts, if <host> wasn't an IP address

  • director: Various fixes to handling backend/director changes at abnormal times, especially while ring was unsynced; these could have resulted in crashes, non-optimal behaviour or ignoring some of the changes

  • director: Use less CPU in imap-login processes when moving/kicking many users

  • lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs when lmtp_rcpt_check_quota=yes

  • doveadm sync -1 fails when local mailboxes exist that do not exist remotely; this commonly happened when lazy_expunge mailbox was autocreated when incremental sync expunged mails

  • pop3: rawlog_dir setting didn't work

• Updated perl-Test-Simple to 1.302100 as per the Fedora version

Thursday 12th October 2017

Local Packages

• Updated dovecot to 2.2.33.1:

  • dovecot-lda was logging to stderr instead of to the log file

• Updated perl-Term-Table to 0.012:

  • Bump minimum Test2::Tools::Tiny version

Friday 13th October 2017

Fedora Project

• Updated perl-List-MoreUtils to 0.426 in F-27 and Rawhide:

  • Fix broken arrayify prototype

  • Revert removal of old List::MoreUtils::XS parts

  • Re-introduce Config::AutoConf (CPAN RT#122875)

  • Bump required version of List::MoreUtils::XS to 0.426, if XS is available

• Updated perl-Test-Simple to 1.302101 in F-27 and Rawhide:

  • Bump Test::Builder::IO::Scalar version for core

Local Packages

• Updated perl-List-MoreUtils to 0.426 as per the Fedora version

• Updated perl-Test-Simple to 1.302101 as per the Fedora version

Monday 16th October 2017

Fedora Project

• Updated perl-Test-Simple to 1.302103 in F-27 and Rawhide:

  • Fix some TODO edge cases that were not previously accounted for

Local Packages

• Updated perl-Test-Simple to 1.302103 as per the Fedora version

• Updated perl-Test2-Suite to 0.000080:

  • Fix for TODO + new ok style

  • Fix UTF8 issue with perl 5.10.0

Tuesday 17th October 2017

Fedora Project

• Updated perl-MetaCPAN-Client to 2.018000 in F-26, F-27 and Rawhide:

  • Fix fetch URL (GH#92)

  • Removed critic author test

Local Packages

• Updated perl-MetaCPAN-Client to 2.018000 as per the Fedora version

Wednesday 18th October 2017

Fedora Project

• Updated perl-Module-Runtime to 0.016 in Rawhide:

  • Port t/taint.t to Perl 5.27.5, where re-requiring an already-loaded module doesn't trigger tainting

  • Skip t/taint.t if the perl empirically doesn't perform taint checks but the script got run anyway (which happens with an unsupported configuration of the Perl core that some people are using in the absence of a supported no-taint configuration)

  • In t/taint.t, use $^X rather than $ENV{PATH} as the primordial tainted value to taint a string being tested

  • In documentation, use four-column indentation for all verbatim material

  • In META.{yml,json}, point to public bug tracker

  • In META.json, specify type of public repository

Local Packages

• Updated java-1.8.0-oracle to Java SE 8 Update 152

  • Bugfix and security update; see release notes at http://www.oracle.com/technetwork/java/javase/8u152-relnotes-3850503.html

• Updated perl-Module-Runtime to 0.016 as per the Fedora version

• Updated perl-Net-DNS to 1.13:

  • New feature: IDN query support

    • Queries for domain names containing non-ASCII characters are now possible on Unicode platforms using CPAN Net::LibIDN2

• Updated perl-XML-LibXML to 2.0130:

  • Fix the tests with libxml2-2.9.6 (CPAN RT#122958)

  • setNamespace() enhancements

Friday 20th October 2017

Fedora Project

• Updated perl-Text-CSV_XS to 1.33 in Rawhide:

  • Small additional fix for eol = \r + BOM

  • Updated documentation for example files

  • Add support for formula actions (GH#11)

    • csv2xls and csv2xlsx now warn by default

  • Reset file info on ->header call (CPAN RT#123320)

Local Packages

• Updated perl-Text-CSV_XS to 1.33 as per the Fedora version

Monday 23rd October 2017

Fedora Project

• Updated perl-IO-Socket-SSL to 2.052 in Rawhide:

  • Disable NPN support if LibreSSL ≥ 2.6.1 is detected since they've replaced the functions with dummies instead of removing NPN completely or setting OPENSSL_NO_NEXTPROTONEG

  • t/01loadmodule.t shows more output helpful in debugging problems

  • Update fingerprints for external tests

  • Update documentation to make behaviour of syswrite more clear

• Updated perl-Test-Simple to 1.302106 in Rawhide:

  • Combine multiple diags into one event

  • Make version number in HashBase sane

Local Packages

• Updated curl to 7.56.1:

  • imap: If a FETCH response has no size, don't call write callback (CVE-2017-1000257)

  • ftp: UBsan fixup 'pointer index expression overflowed'

  • failf: Skip the sprintf() if there are no consumers

  • fuzzer: Move to using external curl-fuzzer

  • lib/Makefile.m32: Allow customizing dll suffixes

  • docs: Fix typo in curl_mime_data_cb man page

  • darwinssl: Add support for TLSv1.3

  • build: Fix --disable-crypto-auth

  • lib/config-win32.h: Let SMB/SMBS be enabled with OpenSSL/NSS

  • openssl: Fix build without HAVE_OPAQUE_EVP_PKEY

  • strtoofft: Remove extraneous null check

  • multi_cleanup: Call DONE on handles that never got that

  • tests: Added flaky keyword to tests 587 and 644

  • pingpong: Return error when trying to send without connection

  • remove_handle: Call multi_done() first, then clear dns cache pointer

  • mime: Be tolerant about setting twice the same header list in a part
  • mime: Improve unbinding top multipart from easy handle
  • mime: Avoid resetting a part's encoder when part's contents change
  • mime: Refuse to add subparts to one of their own descendants
  • RTSP: Avoid integer overflow on funny RTSP responses

  • curl: Don't pass semicolons when parsing Content-Disposition

  • openssl: Enable PKCS12 support for !BoringSSL

  • FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION/

  • CURLOPT_NOPROGRESS.3: Also refer to xferinfofunction

  • CURLOPT_XFERINFODATA.3: Fix duplicate see also

  • test298: Verify --ftp-method nocwd with URL encoded path

  • FTP: URL decode path for dir listing in nocwd mode

  • smtp_done: Fix memory leak on send failure

  • ftpserver: Support case insensitive commands

  • test950: Verify SMTP with custom request

  • openssl: Don't use old BORINGSSL_YYYYMM macros

  • setopt: Update current connection SSL verify parameters

  • winbuild/BUILD.WINDOWS.txt: Mention WITH_NGHTTP2

  • curl: Reimplement stdin buffering in -F option

  • mime: Keep "text/plain" content type if user-specified

  • mime: Fix the content reader to handle >16K data properly

  • configure: Remove the C++ compiler check

  • memdebug: Trace send, recv and socket

  • runtests: Use valgrind for torture as well

  • ldap: Silence clang warning

  • makefile.m32: Allow to override gcc, ar and ranlib

  • setopt: Avoid integer overflows when setting millisecond values

  • setopt: Range check most long options

  • ftp: Reject illegal IP/port in PASV 227 response

  • mime: Do not reuse previously computed multipart size

  • vtls: Change struct Curl_ssl 'close' field name to 'close_one'

  • os400: Add missing symbols in config file
  • mime: Limit base64-encoded lines length to 76 characters

  • mk-ca-bundle: Remove URL for aurora

  • mk-ca-bundle: Fix URL for NSS

• Updated perl-Class-Accessor to 0.51:

  • Increase speed (CPAN RT#84838)

  • Faster constructor (CPAN RT#57353)

  • Fixed typos for CPAN RT#61304 and CPAN RT#86422

• Updated perl-IO-Socket-SSL to 2.052 as per the Fedora version

• Updated perl-Module-CoreList to 5.20171020:

  • Updated for v5.27.5

• Updated perl-Test-Simple to 1.302106 as per the Fedora version

• Updated perl-Test2-Suite to 0.000082:

  • Add Test2::Compare::Float to handle floating point comparison issues with representation error

  • Add float() to Test2::Utils::Compare and import Test2::Compare::Float

  • Import and Export Test2::Utils::Compare::float in Test2::V0

  • Documentation fixes
  • Better 5.10.0/utf8 fix

  • VSTRING comparisons

  • Bag compare now handles duplicates better

Tuesday 24th October 2017

Fedora Project

• Updated perl-Class-Accessor to 0.51 in Rawhide:

  • Performance increase CPAN RT#84838

  • Faster constructor (CPAN RT#57353)

  • Fixed typos for CPAN RT#61304 and CPAN RT#86422

• Updated perl-File-LibMagic to 1.16 in Rawhide:

  • Added a doc note on installing the required dependencies on Red Hat (CPAN RT#110796)

  • Fix tests on macOS (GH#7)

Wednesday 25th October 2017

Local Packages

• Updated perl-Net-FTPSSL to 0.39:

  • Updated the LICENSE file to 2017 (from 2015)

  • Changed default from TLS v1.0 to TLS v1.2 and rearranged the POD a bit

  • Started deprecating useSSL; now warns to use option "SSL_version" instead

• Updated perl-XML-LibXML to 2.0131:

  • Re-include the missing *.pod documents (CPAN RT#123362)

  • Add t/pod-files-presence.t to test for it in the future

  • Fix use-after-free in Node::replaceChild() (CVE-2017-10672, Bug #1470205, GH#8)

Thursday 26th October 2017

Local Packages

• Updated perl-Test2-Suite to 0.000083:

  • Mark a float test TODO until the PR author can fix it

Friday 27th October 2017

Local Packages

• Updated proftpd (1.3.6) to wait for network-online.target before starting (Bug #1506805, GH#617)

Monday 30th October 2017

Fedora Project

• Updated perl-Software-License to 0.103013 in Rawhide:

  • guess_license_from_pod() now knows about Software::License::CC0_1_0

  • Enable "v" as a version word

  • Improve FreeBSD (2-Clause) phrases
  • Added EUPL v1.1 and v1.2

• Updated proftpd (1.3.6) in F-26, F-27 and Rawhide to wait for network-online.target before starting (Bug #1506805, GH#617)

Local Packages

• Updated dovecot:

  • Update dovecot to 2.2.33.2:

    • doveadm: Fix crash in proxying (or dsync replication) if remote is running older than v2.2.33

    • auth: Fix memory leak in %{ldap_dn}

    • dict-sql: Fix data types to work correctly with Cassandra

  • Update pigeonhole to 0.4.21:

    • redirect action: Always set the X-Sieve-Redirected-From header to sieve_user_email if configured; previously, it would use the envelope recipient instead if available, which makes no sense if the primary e-mail address is available

    • vacation extension: Allow ignoring the envelope sender while composing the "To:" header for the reply; this change adds a new setting "sieve_vacation_to_header_ignore_envelope", which, when enabled, means the "To:" header is always composed from headers in the source message and thus allows ignoring the envelope, which is useful e.g. when SRS is used

    • vacation extension: Compose the "To:" header from the full sender address found in the first "Sender:", "From:" or "Resent-From:" header

    • LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts; a missing LDAP-based script could cause the script sequence to exit earlier

    • sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name conversion, which caused problems with mailbox names containing UTF-8 characters; the Dovecot API was changed years ago, but apparently sieve-filter was never updated

• Updated perl-DateTime-TimeZone to 2.14:

  • This release is based on version 2017c of the Olson database

  • Contemporary changes for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks & Caicos

• Updated perl-Lingua-EN-Inflect to 1.903:

  • Various bugs in documentation code debugged

• Updated perl-Software-License to 0.103013 as per the Fedora version

• Updated perl-XML-LibXML to 2.0132:

  • Revert setNamespace() enhancements that broke some dependent tests:

    • Commit df9fdc6659cb2e4e9bc896e58c02dfd79b430fbb

    • Add t/48_rt123379_setNamespace.t

Tuesday 31st October 2017

Fedora Project

• Updated geoipupdate to 2.5.0 in Rawhide:

  • Replace use of strnlen() due to lack of universal availability (GH#71)

  • Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)

  • Remove unused base64 library (GH#68)

  • Add the new configuration option 'PreserveFileTimes'; if set, the downloaded files will get the same modification times as their original on the server (default is '0') (GH#63)

  • Use the correct types when calling 'curl_easy_setopt()'; this fixes warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)

  • In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the 'ProductIds' option was renamed to 'EditionIDs'; the old options will continue to work, but upgrading to the new names is recommended for forward compatibility

• Updated perl-Net-SSLeay to 1.82 in Rawhide:

  • Added support for building under Linuxbrew (a linuxbrew version of MacOS Homebrew)

  • Implement SSL_CTX_set_psk_client_callback() and SSL_set_psk_client_callback()

  • Skip the NPN test if the SSL library is LibreSSL

  • Fixed a problem with a variable declaration in ssleay_session_secret_cb_invoke

  • Bugfix: tlsext_status_cb_invoke(...): free ocsp_response only when allocated; the same callback is used on a server side for OCSP stapling and in that case ocsp_response is NULL and not used

  • New feature: Added a binding SSL_set_session_ticket_ext_cb(ssl, callback, data); a callback used by EAP-FAST/EAP-TEAT to parse and process TLS session ticket

  • New feature: Added a binding SSL_set_session_ticket_ext(ssl, ticket); used by EAP-FAST/EAP-TEAP to define TLS session ticket value

  • Bugfix: tlsext_ticket_key_cb_invoke(...): allow SHA256 HMAC key to be 32 bytes instead of 16 bytes (which OpenSSL will pad with zeros up to 32 bytes)

  • New feature: Added following bindings:

    • X509_get_ex_data(cert, idx)

    • X509_get_ex_new_index(argl, argp, new_func, dup_func, free_func)

    • X509_get_app_data(cert)

    • X509_set_ex_data(cert, idx, data)

    • X509_set_app_data(cert, arg)

    • X509_STORE_CTX_get_ex_new_index(argl, argp, new_func, dup_func, free_func)

    • X509_STORE_CTX_get_app_data(x509_store_ctx)

    • X509_STORE_CTX_set_app_data(x509_store_ctx, arg)

  • New feature: Added an implementation for SSL_get_finished(ssl, buf, count=2*EVP_MAX_MD_SIZE)

  • New feature: Added an implementation for SSL_get_peer_finished(ssl, buf, count=2*EVP_MAX_MD_SIZE)

  • Bugfix: SSL_get_keyblock_size(s): Calculate key block size correctly also with AEAD ciphers, which don’t use digest functions

  • New feature: Added a binding SSL_set_tlsext_status_ocsp_resp(ssl, staple); used by a server side to include OCSP staple in ServerHello

  • Bugfix: SSL_OCSP_response_verify(ssl, rsp, svreq, flags): check that chain and last are not NULL before trying to use them

  • Bugfix: inc/Module/Install/PRIVATE/Net/SSLeay.pm: Don’t quote include and lib paths

• Updated perl-YAML to 1.24 in Rawhide:

  • Fix $LoadCode (GH#180, GH#181, GH#182)

Local Packages

• Updated geoipupdate to 2.5.0 as per the Fedora version

• Updated perl-Net-SSLeay to 1.82 as per the Fedora version

• Updated perl-PPIx-Regexp to 0.053:

  • Recognize \px as Unicode char class; at least, when the x is C, L, M, N, P, S or Z

  • The 'parse' argument to new() is now deprecated

• Updated perl-YAML to 1.24 as per the Fedora version