Package: release.debian.org Severity: normal User: release.debian....@packages.debian.org Usertags: unblock
Please unblock package liblwpx-paranoidagent-perl it fixes a "grave" issue (#761635) makes the package basically useless for SNI hosts. the diff is trivial: --- a/lib/LWPx/Protocol/http_paranoid.pm +++ b/lib/LWPx/Protocol/http_paranoid.pm @@ -68,6 +68,7 @@ sub _new_socket $timeout; $sock = $self->socket_class->new(PeerAddr => $addr, PeerHost => $host, + SSL_hostname => $host, PeerPort => $port, Proto => 'tcp', Timeout => $conn_timeout, and it is the only change between -4 (jessie) and -5 (sid). actual debdiff attached. unblock liblwpx-paranoidagent-perl/1.10-5 -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (500, 'testing'), (1, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16-3-amd64 (SMP w/2 CPU cores) Locale: LANG=fr_CA.utf8, LC_CTYPE=fr_CA.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash
diff -Nru liblwpx-paranoidagent-perl-1.10/debian/changelog liblwpx-paranoidagent-perl-1.10/debian/changelog --- liblwpx-paranoidagent-perl-1.10/debian/changelog 2014-09-09 03:34:18.000000000 -0400 +++ liblwpx-paranoidagent-perl-1.10/debian/changelog 2014-11-18 16:22:25.000000000 -0500 @@ -1,3 +1,10 @@ +liblwpx-paranoidagent-perl (1.10-5) unstable; urgency=medium + + * Added patch for passing the right parameters through IO::Socket::SSL + (Closes: #761635) + + -- Hilko Bengen <ben...@debian.org> Tue, 18 Nov 2014 22:22:17 +0100 + liblwpx-paranoidagent-perl (1.10-4) unstable; urgency=medium * Switched debian/watch to metacpan diff -Nru liblwpx-paranoidagent-perl-1.10/debian/patches/0003-Fix-SNI-for-IO-Socket-SSL.patch liblwpx-paranoidagent-perl-1.10/debian/patches/0003-Fix-SNI-for-IO-Socket-SSL.patch --- liblwpx-paranoidagent-perl-1.10/debian/patches/0003-Fix-SNI-for-IO-Socket-SSL.patch 1969-12-31 19:00:00.000000000 -0500 +++ liblwpx-paranoidagent-perl-1.10/debian/patches/0003-Fix-SNI-for-IO-Socket-SSL.patch 2014-11-18 16:20:37.000000000 -0500 @@ -0,0 +1,21 @@ +From: Hilko Bengen <ben...@debian.org> +Date: Tue, 18 Nov 2014 22:20:32 +0100 +Subject: Fix SNI for IO::Socket::SSL + +Source: <http://ikiwiki.info/plugins/openid/troubleshooting/> +--- + lib/LWPx/Protocol/http_paranoid.pm | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/lib/LWPx/Protocol/http_paranoid.pm b/lib/LWPx/Protocol/http_paranoid.pm +index 13d8504..23a23c5 100644 +--- a/lib/LWPx/Protocol/http_paranoid.pm ++++ b/lib/LWPx/Protocol/http_paranoid.pm +@@ -68,6 +68,7 @@ sub _new_socket + $timeout; + $sock = $self->socket_class->new(PeerAddr => $addr, + PeerHost => $host, ++ SSL_hostname => $host, + PeerPort => $port, + Proto => 'tcp', + Timeout => $conn_timeout, diff -Nru liblwpx-paranoidagent-perl-1.10/debian/patches/series liblwpx-paranoidagent-perl-1.10/debian/patches/series --- liblwpx-paranoidagent-perl-1.10/debian/patches/series 2014-09-09 03:33:24.000000000 -0400 +++ liblwpx-paranoidagent-perl-1.10/debian/patches/series 2014-11-18 16:20:37.000000000 -0500 @@ -1,2 +1,3 @@ 0001-Fix-HTTPS.patch 0002-Use-ca-certificates.patch +0003-Fix-SNI-for-IO-Socket-SSL.patch