CONTENT of INSTALL-PATCH
----------------------------------------------------------------------------
This patch provides additional capabilites to Crypt::SSLeay v0.23 and can be
found on
http://www.progredy.de/download.html
This Patch provides:
* Fixes a (imo) glitch, as the original Crypt::SSLeay as it
depends on direct host name resolution. Using a proxy just
the proxy needs full DNS access. Connecting to a host via proxy
which the originating host behind the firewall/proxy can't resolve (but to
the proxy)
will therefore fail in the original implementation, but will suceed
(hopefully ;-) ) with this one
* Basic Client Cert Support
Support for loading client certificate, client privat key file and
validation
(look up the modified net_ssl_test script). You need a cert
in PEM format. For Conversion from PKCS12 (and other)-> PEM use openssl.
* Support for dumping the server certificate to a file
Files:
SSL.pm (complete file)
SSL.pm.patch (guess....)
SSLeay.xs (complete file)
SSLeay.xs.patch (guess...)
net_ssl_test (test and demo script)
net_ssl_test.patch
All files are based on Joshua Chamas distibution file
Crypt-SSLeay-0.23.tar.gz
Installation:
1. Download Crypt::SSLeay 0.23 from cpan.org and deflate it
2. Unzip, Untar the patches (creates subdir patches)
3. Patch or replace SSLeay.xs in Crypt-SSLeay-0.23
subdirectory (patch -cb <filename> <patchname>)
4. Patch or replace net_ssl_test
5. Install the package (perl Makefile.pl; make; make test; make install)
6. Patch or replace SSL.pm (e.g. be found in
/usr/local/lib/perl5/site_perl/aix/Net/SSL.pm)
USAGE:
for basic support use "net_ssl_test -h"
DISCLAIMER:
As usual NO WARRANTY FOR ANYTHING; USE AT YOUR OWN RISK
This code has been tested in proxy-mode only! Direct linkup should not be
affected but who knows....
DEBUGGING:
I added (and commentet out) some print's in SSL.pm (method configure)
where the certificate and stuff is loaded.
If you want to know whether the cert is loaded properly comment them
in. They return 1 in case of success
OPENSSL:
This stuff was tested against openssl-0.9.6 only!
Contact:
please refer to my freemail account: [EMAIL PROTECTED]
Provided by ProGredy GmbH
--
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net
Binary data
