Thursday 13th January 2022
Fedora Project
Updated perl-Net-SSLeay to 1.92 in Rawhide:
Net::SSLeay now supports stable releases of OpenSSL 3.0
OpenSSL 3.0.0 introduces the concept of "providers", which contain cryptographic algorithm implementations; many outdated, deprecated and/or insecure algorithms have been moved to the "legacy" provider, which may need to be loaded explicitly in order to use them with Net::SSLeay (see "Low level API: OSSL_LIB_CTX and OSSL_PROVIDER related functions" in the Net::SSLeay module documentation for details)
Net::SSLeay's built-in PEM_get_string_PrivateKey() function depends on algorithms that have moved to the legacy provider described above; if OpenSSL has been compiled without the legacy provider, the tests t/local/33_x509_create_cert.t and t/local/63_ec_key_generate_key.t will fail when the test suite is run
TLS 1.1 and below may only be used at security level 0 as of OpenSSL 3.0.0; if a minimum required security level is imposed (e.g. in an OpenSSL configuration file managed by the operating system), the tests t/local/44_sess.t and t/local/45_exporter.t will fail when the test suite is run
Net::SSLeay now supports stable releases of LibreSSL from the 3.2-3.4 series (with the exception of 3.2.2 and 3.2.3 - see "COMPATIBILITY" in the Net::SSLeay module documentation for details)
The TLS 1.3 implementation in LibreSSL 3.1-3.3, parts of which are enabled by default, is not fully compatible with the libssl API and may not function as expected with Net::SSLeay; see "KNOWN BUGS AND CAVEATS" in the Net::SSLeay module documentation for details
A number of new libcrypto/libssl constants and functions are now exposed, including SSL_CTX_set_keylog_callback() and SSL_CTX_set_msg_callback(), which are helpful when debugging TLS handshakes; see the release notes for the 1.91 developer releases (in the Changes file) for a full list of newly-exposed constants and functions
Branched and built perl-Log-Dispatch-FileRotate (1.38) for EPEL-9
Local Packages
Updated libmetalink (0.1.3) to fix a few issues found by the Coverity static analysis tool (https://bugs.launchpad.net/libmetalink/+bug/1784359 and https://github.com/metalink-dev/libmetalink/pull/2)
Updated perl-Net-SSLeay to 1.92 as per the Fedora version