Hello community, here is the log from the commit of package perl-Net-SSLeay for openSUSE:Factory checked in at 2019-03-13 09:09:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/perl-Net-SSLeay (Old) and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.28833 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-Net-SSLeay" Wed Mar 13 09:09:53 2019 rev:30 rq:681764 version:1.86_07 Changes: -------- --- /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes 2019-01-24 14:01:44.820165676 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.28833/perl-Net-SSLeay.changes 2019-03-13 09:09:57.999419333 +0100 @@ -1,0 +2,226 @@ +Tue Mar 5 14:04:18 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonza...@suse.com> + +- Update to 1.86_07 + 1.86_07 2018-12-13 + - Net::SSLeay::RSA_generate_key() now prefers using + RSA_generate_key_ex. This avois deprecated RSA_generate_key + and allows removing the only Android specific code in + SSLeay.xs. Fixes RT#127593. Thanks to Rouven Weiler. + - SSL_CTX_get0_param, SSL_CTX_get0_param, + X509_VERIFY_PARAM_set1_host, X509_VERIFY_PARAM_add1_host, + X509_VERIFY_PARAM_set_hostflags, + X509_VERIFY_PARAM_get0_peername, + X509_VERIFY_PARAM_set1_email, X509_VERIFY_PARAM_set1_ip and + X509_VERIFY_PARAM_set1_ip_asc added in 1.83 for OpenSSL + 1.0.2 and later are now available with LibreSSL 2.7.0 and + later. + - get_keyblock_size() now gets the MAC secret size from the + cipher on LibreSSL 2.7.0 and later, rather than reaching + into libssl internals. This effectively takes the OpenSSL + 1.1 code path for LibreSSL 2.7.0 instead of the OpenSSL 1.0 + code path. Thanks to Alexander Bluhm. + - get_client_random and get_server_random now use API + functions supported by LibreSSL 2.7.0 and later. Thanks to + Alexander Bluhm. + - Add X509_check_host(), X509_check_email(), X509_check_ip(), + and X509_check_ip_asc() for LibreSSL 2.5.0 and later. Thanks + to Alexander Bluhm. + - OpenSSL_version() and OpenSSL_version_num() are available + with LibreSSL 2.7.0 and later. Thanks to Alexander Bluhm. + - Use OPENSSL_cleanse() instead of memset(). Fixes + RT#116599. Thanks to A. Sinan Unur. + + 1.86_06 2018-09-29 + - Net::SSLeay::read() and SSL_peek() now check SSL_get_error() + for SSL_ERROR_ZERO_RETURN for return values <= 0 to make + Net::SSLeay::read() behave more like underlying OpenSSL + function SSL_read(). + Convenience function ssl_read_all() now does an automatic + retry when ERROR_WANT_READ or ERROR_WANT_WRITE is returned + with Net::SSLeay::read(). + Convenience function ssl_read_until() now uses + Net::SSLeay::ssl_read_all() instead of + Net::SSLeay::read(). Tests 07_sslecho.t and 36_verify.t were + also updated to use ssl_read_all() and ssl_write_all(). The + tests now also disable TLSv1.3 session tickets and ignore + SIGPIPE to avoid this signal when the client has finished + before server has sent session tickets and called + Net::SSLeay::accept(). + Thanks to Petr Pisar and Sebastian Andrzej Siewior for the + patches (in #RT125218). + - Fix a memory leak in cb_data_advanced_put. Fixes + RT#127131. Noticed, investigated and patched by Paul + Evans. Thanks! + - Enable OpenSSL 1.1.1-pre9 with Travis CI. + - Add SSL_CTX_set_num_tickets, SSL_CTX_get_num_tickets, + SSL_set_num_ticket and SSL_get_num_tickets for controlling + the number of TLSv1.3 session tickets that are issued. Add + tests in 44_sess.t. Parts taken from a larger patch by Petr + Pisar of RedHat. + - Add SSL_CTX_set_ciphersuites and SSL_set_ciphersuites for + configuring the available TLSv1.3 ciphersuites. Add tests in + 43_misc_functions.t and clarify SSL_client_version tests. + - Add SSL_CTX_set_security_level, SSL_CTX_get_security_level, + SSL_set_security_level and SSL_get_security_level. + Add new test file 65_security_level.t. + All courtesy of Damyan Ivanov of Debian project. + - Fix export_keying_material return value check and context + handling. SSL_export_keying_material use_context is now + correctly set to non-zero value when context is an empty + string. This affects values exported with TLSv1.2 and earlier. + Update documentation in NetSSLeay.pod and add tests + in t/local/45_export.t. + - Add RAND_priv_bytes. Add new test file t/local/10_rand.t for + RAND_bytes, RAND_pseudo_bytes, RAND_priv_bytes, RAND_status, + RAND_poll, RAND_file_name and RAND_load_file. + - Update documentation for RAND_*bytes return values and + RAND_file_name behaviour with LibreSSL. + - Add SSL_SESSION_is_resumable. Add and update tests in 44_sess.t. + - Set OpenSSL security level to 1 in tests that use the test suite's + (1024-bit) RSA keys, which allows the test suite to pass when + Net-SSLeay is built against an OpenSSL with a higher default + security level. Fixes RT#126987. Thanks to Petr Pisar (in + RT#126270) and Damyan Ivanov (in RT#126987) for the reports and + patches, and to Damyan Ivanov for the preferred patch. + - Add SSL_CTX_sess_set_new_cb and SSL_CTX_sess_set_remove_cb. + Add new test file 44_sess.t for these and future session + related tests for which no specific test file is needed. + - Add SSL_get_version, SSL_client_version and SSL_is_dtls. + - Add SSL_peek_ex, SSL_read_ex, SSL_write_ex and SSL_has_pending. + Add tests in t/local/11_read.t + - Add SSL_CTX_set_post_handshake_auth contributed by Paul + Howarth. Add SSL_set_post_handshake_auth, + SSL_verify_client_post_handshake and constant + SSL_VERIFY_POST_HANDSHAKE. + - Applied a patch to set_cert_and_key() from Damyan Ivanov, + Debian Perl Group. This function now returns errors from + library's error stack only when an underlying routine + fails. Unrelated errors are now skipped. Fixes RT#126988. + - Add support for TLSv1.3 via $Net::SSLeay::ssl_version. + - Enhance t/local/43_misc_functions.t get_keyblock_size test + to work better with AEAD ciphers. + - Add constants SSL_OP_ENABLE_MIDDLEBOX_COMPAT and + SSL_OP_NO_ANTI_REPLAY for TLSv1.3 + - Fix compile time DEFINE=-DSHOW_XS_DEBUG to work with + non-threaded Perls. Fixes RT#127027. Thanks to SREZIC for + the report. Also fix other minor compile warnings. + + 1.86_05 2018-08-22 + - Net-SSLeay now requires at least Perl 5.8.1. This is a + formalisation of what has been the de facto case for some time, + as the distribution hasn't compiled and passed its tests on Perl + 5.005 for several years. + - Increment Net::SSLeay::Handle's version number to keep it in sync + with Net::SSLeay's, thus satisfying Kwalitee's consistent_version + metric. + - Re-enable the d2i_X509_bio() test in t/local/33_x509_create_cert.t + for LibreSSL. Thanks to Alexander Bluhm. + - Automatically detect new library names on Windows for OpenSSL + 1.1.0 onwards (libcrypto, libssl). Fixes part of RT#121084. Thanks + to Jean-Damien Durand. + - Fix a typo preventing OpenSSL libraries built with the VC compiler + (i.e. ones with a ".lib" suffix) from being automatically detected + on Windows. Fixes part of RT#121084. Thanks to Jean-Damien Durand. + - Add missing call to va_end() following va_start() in TRACE(). + Fixes RT#126028. Thanks to Jitka Plesnikova. + - Added SSL_in_init() and the related functions for all + libraries and their versions. All return 0 or 1 as + documented by OpenSSL 1.1.1. Use of these functions is + recommended over using constants returned by get_state() and + state(). New constants TLS_ST_*, used by OpenSSL 1.1.0 and + later, will not be made available by Net::SSLeay. + + 1.86_04 2018-07-30 + - Re-add SSLv3_method() for OpenSSL 1.0.2 and above. Fixes + RT#101484. + - Don't expose ENGINE-related functions when building against + OpenSSL builds without ENGINE support. Fixes RT#121538. Thanks to + Paul Green. + - Automatically detect OpenSSL 1.0.x on VMS, and update VMS + installation instructions to reflect removal of Module::Install + from the build system. Fixes RT#124388. Thanks to Craig A. Berry. + - Prevent memory leak in OCSP_cert2ids() and OCSP_response_verify(). + Fixes RT#125273. Thanks to Steffen Ullrich. + + 1.86_03 2018-07-19 + - Convert packaging to ExtUtils::MakeMaker. Thanks to mohawk2. + - Module::Install is no longer a prerequisite when building + from the reposistory. + - Re-apply patch from ETJ permitting configure and build in + places with a space in the name. + + 1.86_02 2018-07-06 + - Removed inc/ from repository. Module::Install is now a + prerequisite when building from the repository. This allowed + also removing "." from Makefile.PL lib path which was added + in version 1.81. These updates require no changes when + building from release packages. They also help AppVeyor + builds to work better with old Perls. + - Added CONTRIBUTING.md, reformatted the previous Changes + entry to use CPAN::Changes::Spec guidelines and removed + unused version control tags from comments. + + 1.86_01 2018-07-04 + [Version control system change] + - Chris Novakovic did a full conversion from the old Debian + hosted SVN repository to git. + - Fixes to commit metadata, branches and tags that git-svn + couldn't handle or had no way of handling, were done + manually or semi-automatically afterwards. For instance, the + "git-svn-id:" lines that git-svn appends to commit messages + were kept because Mike used SVN revision numbers in RT + replies to indicate when bugs had been fixed/patches applied + (which may be useful for future reference). + - All commits were replayed onto a single master branch rather + than having separate dead-end branches for the old SVN + version tags (as this seems more "git-like"). + - New lightweight tags were created for each public release + going back as far as the start of the SVN repository using + data from MetaCPAN (cross-referencing with the changelog + when it wasn't clear when a release was cut from the SVN + repo). + - Florian's and Mike's email addresses were mapped to git + author/committer IDs + [Continuous integration] + - Travis CI configuration was added for automated testing on + Linux using 64 bit Ubuntu Trusty. Build matrix dimensions + are: Perl 5.8 - 5.26 x OpenSSL 0.9.8zh - 1.1.0h. Only the + currently latest version for each major Perl and OpenSSL + release is chosen. + - AppVeyor configuration was added for automated testing on + Windows. Build matrix dimensions are: Perl 5.8 - 5.26 x + 32bit and 64bit Perl environment x Windows Server 2012R2 and + Windows Server 2016. The Perl environment is Strawberry Perl + and its OpenSSL is used with builds. Only the latest major + versions are used, similarly to Travis CI. Net-SSLeay PPM + and PPD files are made available as artifacts. + - Added README.md with link to master branch build and test ++++ 29 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/perl-Net-SSLeay/perl-Net-SSLeay.changes ++++ and /work/SRC/openSUSE:Factory/.perl-Net-SSLeay.new.28833/perl-Net-SSLeay.changes Old: ---- Net-SSLeay-1.85-Adapt-to-OpenSSL-1.1.1.patch Net-SSLeay-1.85-Avoid-SIGPIPE-in-t-local-36_verify.t.patch Net-SSLeay-1.85-Expose_SSL_CTX_set_post_handshake_auth.patch Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-.patch Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-from_write_partial.patch Net-SSLeay-1.85.tar.gz New: ---- Net-SSLeay-1.86_07.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-Net-SSLeay.spec ++++++ --- /var/tmp/diff_new_pack.EhNJkR/_old 2019-03-13 09:10:00.487419076 +0100 +++ /var/tmp/diff_new_pack.EhNJkR/_new 2019-03-13 09:10:00.515419074 +0100 @@ -18,23 +18,14 @@ %define cpan_name Net-SSLeay Name: perl-Net-SSLeay -Version: 1.85 +Version: 1.86_07 Release: 0 Summary: Perl extension for using OpenSSL License: Artistic-2.0 Group: Development/Libraries/Perl URL: http://search.cpan.org/dist/Net-SSLeay/ -Source: http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz -# Adapt to OpenSSL 1.1.1, bug RH#1614884, CPAN RT#125218 -Patch0: Net-SSLeay-1.85-Adapt-to-OpenSSL-1.1.1.patch -# Avoid SIGPIPE in t/local/36_verify.t, CPAN RT#125218 -Patch2: Net-SSLeay-1.85-Avoid-SIGPIPE-in-t-local-36_verify.t.patch -# Revert retry in Net::SSLeay::{read,write}(), CPAN RT#125218 -Patch3: Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-.patch -# Revert retry in Net::SSLeay::write_partial(), CPAN RT#125218 -Patch4: Net-SSLeay-1.85-Move-SSL_ERROR_WANT_READ-SSL_ERROR_WANT_WRITE-retry-from_write_partial.patch -# PATCH-FIX-UPSTREAM https://github.com/radiator-software/p5-net-ssleay/pull/68 -Patch5: Net-SSLeay-1.85-Expose_SSL_CTX_set_post_handshake_auth.patch +#Source: http://www.cpan.org/modules/by-module/Net/Net-SSLeay-%{version}.tar.gz +Source: https://cpan.metacpan.org/authors/id/R/RA/RADIATOR/%{cpan_name}-%{version}.tar.gz BuildRequires: libopenssl-devel BuildRequires: openssl BuildRequires: perl @@ -56,7 +47,6 @@ %prep %setup -q -n %{cpan_name}-%{version} -%autopatch -p1 # replace rest of /usr/local/bin/perl with /usr/bin/perl for f in $(find . -type f -exec grep -l "%{_prefix}/local/bin/perl" {} \; ); do