cpan Net-SSLeay 1.91_02

latest releases: 1.94, 1.93_05, 1.93_04...
pre-release2 years ago
  • On OpenVMS, detect vendor SSL111 product based on OpenSSL 1.1.x.
  • Cast the return value of OCSP_SINGLERESP_get0_id to fix a
    const/non-const mismatch warning that broke the build on OpenVMS.
  • Create SSL_CTXs with Test::Net::SSLeay's new_ctx() function for tests that
    are broken with LibreSSL 3.2. Partially fixes GH-232.
  • In 36_verify.t, account for the presence of the X509_V_FLAG_LEGACY_VERIFY
    flag (signalling the use of the legacy X.509 verifier) in LibreSSL 3.2
    versions from 3.2.4 onwards. Fixes the remainder of GH-232.
  • Note in the Net::SSLeay documentation that the TLS 1.3 implementation in
    LibreSSL 3.1 - 3.3, parts of which are enabled by default, is not
    libssl-compatible. See the "KNOWN BUGS AND CAVEATS" section of
    lib/Net/SSLeay.pod for details.
  • Add constants for, but not limited to,
    SSL_CTX_set_msg_callback and SSL_set_msg_callback functions:
    SSL3RT* for record content types, SSL3MT* for Handshake
    and ChangeCipherSpec message types, SSL2_VERSION to
    complement the list of existing SSL and TLS version
    constants and SSL2MT* for SSLv2 Handshake messages.
  • Expose SSL_CTX_set_keylog_callback and
    SSL_CTX_get_keylog_callback available with OpenSSL 1.1.1pre1
    and later.
  • Enhance 10_rand.t RAND_file_name tests: tests are no longer
    affected by the runtime environment variables, HOME and
    RANDFILE. These variables are insted controlled by the tests
    with local %ENV. Problems related to RAND_file_name were
    discussed in Github issue GH-152, and there might still be
    cases when, for example, setuid is used because of OpenSSL's
    use of glibc secure_getenv() and related functions. Address
    RAND_file_name differences between OpenSSL versions. Note in
    SSLeay.pod that RAND_file_name() can return undef with
    LibreSSL and recent OpenSSL versions.
  • Removed the following exportable symbols from SSLeay.pm:
    • SESSION, clear_error and err have never been defined.
    • add_session, flush_sessions and remove_session were
      removed in Net::SSLeay 1.04
    • Undocumented X509_STORE_CTX_set_flags() was removed in
      Net::SSLeay 1.37 when X509_VERIFYPARAM* functions were
      added. These are preferred over directly setting the flags.
  • Clarified Changes entry for release 1.75 to state that
    CTX_v2_new is not removed from Net::SSLeay. SSLv2 is
    completely removed in OpenSSL 1.1.0.
  • Beginning with OpenSSL 3.0.0-alpha17, SSL_CTX_get_options()
    and related functions return uint64_t instead of long. For
    this reason constant() in constant.c and Net::SSLeay must
    also be able to return 64bit constants. Add uint64_t
    definitions to typemap file and update constant() and
    options functions to use uint64_t with OpenSSL 3.0.0 and
    later when Perl is compiled with 64bit integers. With 32bit
    integers, the functions remain as they are: constant()
    functions return double and options functions return
    long. This partially fixes GH-315, 32bit integer Perls need
    to be handled separately.
  • Work around macOS Monterey build failure during 'perl
    Makefile.PL' that causes perl to exit with 'WARNING:
    .../perl is loading libcrypto in an unsafe way' or similar
    message. This fixes GH-329. Thanks to Daniel J. Luke for the
    report and John Napiorkowski for additional help.

Don't miss a new Net-SSLeay release

NewReleases is sending notifications on new releases.