Hello community,
here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory
checked in at 2019-03-13 09:09:53
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old)
and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.28833 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-Net-SSLeay"
Wed Mar 13 09:09:53 2019 rev:30 rq:681764 version:1.86_07
Changes:
--------
--- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes
2019-01-24 14:01:44.820165676 +0100
+++
/work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.28833/perl-Net-SSLeay.changes
2019-03-13 09:09:57.999419333 +0100
@@ -1,0 +2,226 @@
+Tue Mar 5 14:04:18 UTC 2019 - Pedro Monreal Gonzalez
<pmonrealgonza...@suse.com>
+
+- Update to 1.86_07
+ 1.86_07 2018-12-13
+ - Net::SSLeay::RSA_generate_key() now prefers using
+ RSA_generate_key_ex. This avois deprecated RSA_generate_key
+ and allows removing the only Android specific code in
+ SSLeay.xs. Fixes RT#127593. Thanks to Rouven Weiler.
+ - SSL_CTX_get0_param, SSL_CTX_get0_param,
+ X509_VERIFY_PARAM_set1_host, X509_VERIFY_PARAM_add1_host,
+ X509_VERIFY_PARAM_set_hostflags,
+ X509_VERIFY_PARAM_get0_peername,
+ X509_VERIFY_PARAM_set1_email, X509_VERIFY_PARAM_set1_ip and
+ X509_VERIFY_PARAM_set1_ip_asc added in 1.83 for OpenSSL
+ 1.0.2 and later are now available with LibreSSL 2.7.0 and
+ later.
+ - get_keyblock_size() now gets the MAC secret size from the
+ cipher on LibreSSL 2.7.0 and later, rather than reaching
+ into libssl internals. This effectively takes the OpenSSL
+ 1.1 code path for LibreSSL 2.7.0 instead of the OpenSSL 1.0
+ code path. Thanks to Alexander Bluhm.
+ - get_client_random and get_server_random now use API
+ functions supported by LibreSSL 2.7.0 and later. Thanks to
+ Alexander Bluhm.
+ - Add X509_check_host(), X509_check_email(), X509_check_ip(),
+ and X509_check_ip_asc() for LibreSSL 2.5.0 and later. Thanks
+ to Alexander Bluhm.
+ - OpenSSL_version() and OpenSSL_version_num() are available
+ with LibreSSL 2.7.0 and later. Thanks to Alexander Bluhm.
+ - Use OPENSSL_cleanse() instead of memset(). Fixes
+ RT#116599. Thanks to A. Sinan Unur.
+
+ 1.86_06 2018-09-29
+ - Net::SSLeay::read() and SSL_peek() now check SSL_get_error()
+ for SSL_ERROR_ZERO_RETURN for return values <= 0 to make
+ Net::SSLeay::read() behave more like underlying OpenSSL
+ function SSL_read().
+ Convenience function ssl_read_all() now does an automatic
+ retry when ERROR_WANT_READ or ERROR_WANT_WRITE is returned
+ with Net::SSLeay::read().
+ Convenience function ssl_read_until() now uses
+ Net::SSLeay::ssl_read_all() instead of
+ Net::SSLeay::read(). Tests 07_sslecho.t and 36_verify.t were
+ also updated to use ssl_read_all() and ssl_write_all(). The
+ tests now also disable TLSv1.3 session tickets and ignore
+ SIGPIPE to avoid this signal when the client has finished
+ before server has sent session tickets and called
+ Net::SSLeay::accept().
+ Thanks to Petr Pisar and Sebastian Andrzej Siewior for the
+ patches (in #RT125218).
+ - Fix a memory leak in cb_data_advanced_put. Fixes
+ RT#127131. Noticed, investigated and patched by Paul
+ Evans. Thanks!
+ - Enable OpenSSL 1.1.1-pre9 with Travis CI.
+ - Add SSL_CTX_set_num_tickets, SSL_CTX_get_num_tickets,
+ SSL_set_num_ticket and SSL_get_num_tickets for controlling
+ the number of TLSv1.3 session tickets that are issued. Add
+ tests in 44_sess.t. Parts taken from a larger patch by Petr
+ Pisar of RedHat.
+ - Add SSL_CTX_set_ciphersuites and SSL_set_ciphersuites for
+ configuring the available TLSv1.3 ciphersuites. Add tests in
+ 43_misc_functions.t and clarify SSL_client_version tests.
+ - Add SSL_CTX_set_security_level, SSL_CTX_get_security_level,
+ SSL_set_security_level and SSL_get_security_level.
+ Add new test file 65_security_level.t.
+ All courtesy of Damyan Ivanov of Debian project.
+ - Fix export_keying_material return value check and context
+ handling. SSL_export_keying_material use_context is now
+ correctly set to non-zero value when context is an empty
+ string. This affects values exported with TLSv1.2 and earlier.
+ Update documentation in NetSSLeay.pod and add tests
+ in t/local/45_export.t.
+ - Add RAND_priv_bytes. Add new test file t/local/10_rand.t for
+ RAND_bytes, RAND_pseudo_bytes, RAND_priv_bytes, RAND_status,
+ RAND_poll, RAND_file_name and RAND_load_file.
+ - Update documentation for RAND_*bytes return values and
+ RAND_file_name behaviour with LibreSSL.
+ - Add SSL_SESSION_is_resumable. Add and update tests in 44_sess.t.
+ - Set OpenSSL security level to 1 in tests that use the test suite's
+ (1024-bit) RSA keys, which allows the test suite to pass when
+ Net-SSLeay is built against an OpenSSL with a higher default
+ security level. Fixes RT#126987. Thanks to Petr Pisar (in
+ RT#126270) and Damyan Ivanov (in RT#126987) for the reports and
+ patches, and to Damyan Ivanov for the preferred patch.
+ - Add SSL_CTX_sess_set_new_cb and SSL_CTX_sess_set_remove_cb.
+ Add new test file 44_sess.t for these and future session
+ related tests for which no specific test file is needed.
+ - Add SSL_get_version, SSL_client_version and SSL_is_dtls.
+ - Add SSL_peek_ex, SSL_read_ex, SSL_write_ex and SSL_has_pending.
+ Add tests in t/local/11_read.t
+ - Add SSL_CTX_set_post_handshake_auth contributed by Paul
+ Howarth. Add SSL_set_post_handshake_auth,
+ SSL_verify_client_post_handshake and constant
+ SSL_VERIFY_POST_HANDSHAKE.
+ - Applied a patch to set_cert_and_key() from Damyan Ivanov,
+ Debian Perl Group. This function now returns errors from
+ library's error stack only when an underlying routine
+ fails. Unrelated errors are now skipped. Fixes RT#126988.
+ - Add support for TLSv1.3 via $Net::SSLeay::ssl_version.
+ - Enhance t/local/43_misc_functions.t get_keyblock_size test
+ to work better with AEAD ciphers.
+ - Add constants SSL_OP_ENABLE_MIDDLEBOX_COMPAT and
+ SSL_OP_NO_ANTI_REPLAY for TLSv1.3
+ - Fix compile time DEFINE=-DSHOW_XS_DEBUG to work with
+ non-threaded Perls. Fixes RT#127027. Thanks to SREZIC for
+ the report. Also fix other minor compile warnings.
+
+ 1.86_05 2018-08-22
+ - Net-SSLeay now requires at least Perl 5.8.1. This is a
+ formalisation of what has been the de facto case for some time,
+ as the distribution hasn't compiled and passed its tests on Perl
+ 5.005 for several years.
+ - Increment Net::SSLeay::Handle's version number to keep it in sync
+ with Net::SSLeay's, thus satisfying Kwalitee's consistent_version
+ metric.
+ - Re-enable the d2i_X509_bio() test in t/local/33_x509_create_cert.t
+ for LibreSSL. Thanks to Alexander Bluhm.
+ - Automatically detect new library names on Windows for OpenSSL
+ 1.1.0 onwards (libcrypto, libssl). Fixes part of RT#121084. Thanks
+ to Jean-Damien Durand.
+ - Fix a typo preventing OpenSSL libraries built with the VC compiler
+ (i.e. ones with a ".lib" suffix) from being automatically detected
+ on Windows. Fixes part of RT#121084. Thanks to Jean-Damien Durand.
+ - Add missing call to va_end() following va_start() in TRACE().
+ Fixes RT#126028. Thanks to Jitka Plesnikova.
+ - Added SSL_in_init() and the related functions for all
+ libraries and their versions. All return 0 or 1 as
+ documented by OpenSSL 1.1.1. Use of these functions is
+ recommended over using constants returned by get_state() and
+ state(). New constants TLS_ST_*, used by OpenSSL 1.1.0 and
+ later, will not be made available by Net::SSLeay.
+
+ 1.86_04 2018-07-30
+ - Re-add SSLv3_method() for OpenSSL 1.0.2 and above. Fixes
+ RT#101484.
+ - Don't expose ENGINE-related functions when building against
+ OpenSSL builds without ENGINE support. Fixes RT#121538. Thanks to
+ Paul Green.
+ - Automatically detect OpenSSL 1.0.x on VMS, and update VMS
+ installation instructions to reflect removal of Module::Install
+ from the build system. Fixes RT#124388. Thanks to Craig A. Berry.
+ - Prevent memory leak in OCSP_cert2ids() and OCSP_response_verify().
+ Fixes RT#125273. Thanks to Steffen Ullrich.
+
+ 1.86_03 2018-07-19
+ - Convert packaging to ExtUtils::MakeMaker. Thanks to mohawk2.
+ - Module::Install is no longer a prerequisite when building
+ from the reposistory.
+ - Re-apply patch from ETJ permitting configure and build in
+ places with a space in the name.
+
+ 1.86_02 2018-07-06
+ - Removed inc/ from repository. Module::Install is now a
+ prerequisite when building from the repository. This allowed
+ also removing "." from Makefile.PL lib path which was added
+ in version 1.81. These updates require no changes when
+ building from release packages. They also help AppVeyor
+ builds to work better with old Perls.
+ - Added CONTRIBUTING.md, reformatted the previous Changes
+ entry to use CPAN::Changes::Spec guidelines and removed
+ unused version control tags from comments.
+
+ 1.86_01 2018-07-04
+ [Version control system change]
+ - Chris Novakovic did a full conversion from the old Debian
+ hosted SVN repository to git.
+ - Fixes to commit metadata, branches and tags that git-svn
+ couldn't handle or had no way of handling, were done
+ manually or semi-automatically afterwards. For instance, the
+ "git-svn-id:" lines that git-svn appends to commit messages
+ were kept because Mike used SVN revision numbers in RT
+ replies to indicate when bugs had been fixed/patches applied
+ (which may be useful for future reference).
+ - All commits were replayed onto a single master branch rather
+ than having separate dead-end branches for the old SVN
+ version tags (as this seems more "git-like").
+ - New lightweight tags were created for each public release
+ going back as far as the start of the SVN repository using
+ data from MetaCPAN (cross-referencing with the changelog
+ when it wasn't clear when a release was cut from the SVN
+ repo).
+ - Florian's and Mike's email addresses were mapped to git
+ author/committer IDs
+ [Continuous integration]
+ - Travis CI configuration was added for automated testing on
+ Linux using 64 bit Ubuntu Trusty. Build matrix dimensions
+ are: Perl 5.8 - 5.26 x OpenSSL 0.9.8zh - 1.1.0h. Only the
+ currently latest version for each major Perl and OpenSSL
+ release is chosen.
+ - AppVeyor configuration was added for automated testing on
+ Windows. Build matrix dimensions are: Perl 5.8 - 5.26 x
+ 32bit and 64bit Perl environment x Windows Server 2012R2 and
+ Windows Server 2016. The Perl environment is Strawberry Perl
+ and its OpenSSL is used with builds. Only the latest major
+ versions are used, similarly to Travis CI. Net-SSLeay PPM
+ and PPD files are made available as artifacts.
+ - Added README.md with link to master branch build and test
++++ 29 more lines (skipped)
++++ between /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes
++++ and
/work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.28833/perl-Net-SSLeay.changes
Old:
----
Net-SSLeay-1.85-Adapt-to-OpenSSL-1.1.1.patch
Net-SSLeay-1.85-Avoid-SIGPIPE-in-t-local-36_verify.t.patch
Net-SSLeay-1.85-Expose_SSL_CTX_set_post_handshake_auth.patch
Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-.patch
Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-from_write_partial.patch
Net-SSLeay-1.85.tar.gz
New:
----
Net-SSLeay-1.86_07.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ perl-Net-SSLeay.spec ++++++
--- /var/tmp/diff_new_pack.EhNJkR/_old 2019-03-13 09:10:00.487419076 +0100
+++ /var/tmp/diff_new_pack.EhNJkR/_new 2019-03-13 09:10:00.515419074 +0100
@@ -18,23 +18,14 @@
%define cpan_name Net-SSLeay
Name: perl-Net-SSLeay
-Version: 1.85
+Version: 1.86_07
Release: 0
Summary: Perl extension for using OpenSSL
License: Artistic-2.0
Group: Development/Libraries/Perl
URL: http://search.cpan.org/dist/Net-SSLeay/
-Source:
http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz
-# Adapt to OpenSSL 1.1.1, bug RH#1614884, CPAN RT#125218
-Patch0: Net-SSLeay-1.85-Adapt-to-OpenSSL-1.1.1.patch
-# Avoid SIGPIPE in t/local/36_verify.t, CPAN RT#125218
-Patch2: Net-SSLeay-1.85-Avoid-SIGPIPE-in-t-local-36_verify.t.patch
-# Revert retry in Net::SSLeay::{read,write}(), CPAN RT#125218
-Patch3:
Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-.patch
-# Revert retry in Net::SSLeay::write_partial(), CPAN RT#125218
-Patch4:
Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-from_write_partial.patch
-# PATCH-FIX-UPSTREAM https://github.com/radiator-software/p5-net-ssleay/pull/68
-Patch5: Net-SSLeay-1.85-Expose_SSL_CTX_set_post_handshake_auth.patch
+#Source:
http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz
+Source:
https://cpan.metacpan.org/authors/id/R/RA/RADIATOR/%{cpan_name}-%{version}.tar.gz
BuildRequires: libopenssl-devel
BuildRequires: openssl
BuildRequires: perl
@@ -56,7 +47,6 @@
%prep
%setup -q -n %{cpan_name}-%{version}
-%autopatch -p1
# replace rest of /usr/local/bin/perl with /usr/bin/perl
for f in $(find . -type f -exec grep -l "%{_prefix}/local/bin/perl" {} \; ); do
