summaryrefslogtreecommitdiff
path: root/security/p5-Net-SSLeay
AgeCommit message (Collapse)AuthorFilesLines
2016-06-08Bump PKGREVISION for perl-5.24.wiz1-1/+2
2016-04-13Update p5-Net-SSLeay to 1.74.wiz2-8/+7
1.74 2016-04-12 README.OSX was missing from the distribution 1.73 2016-04-11 Added X509_get_X509_PUBKEY. Patch supplied by GUILHEM. Thanks. Added README.OSX with instructions on how to build for recent OS X. Added info about using OPENSSL_PREFIX to README.Win32. Added comments in POD about installation documentation. Added '/usr/local/opt/openssl/bin/openssl' to Openssl search path for latest version of OSX homebrew openssl. Patch from Shoichi Kaji.
2016-03-05Bump PKGREVISION for security/openssl ABI bump.jperkin1-1/+2
2015-11-04Add SHA512 digests for distfiles for security categoryagc1-1/+2
Problems found locating distfiles: Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz Package libidea: missing distfile libidea-0.8.2b.tar.gz Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2 Package uvscan: missing distfile vlp4510e.tar.Z Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2015-09-30Update to 1.72:wiz2-6/+6
1.72 2015-09-22 Fixed a problem where SvPVx_nolen was undefined in some versions of perl. Reported by Karen Etheridge. Replaced with SvPV_nolen. Fixed a cast warning on Darwin reported by Karen Etheridge. 1.71 2015-09-18 Patch from Ben Kaduk: Conditionalise support for MD4, MD5. Added support for linking libraries in /usr/local/lib64 for some flavours of Linux like RH Tikanga. Fixes to X509_check_host, X509_check_ip, SSL_CTX_set_alpn_protos, and SSL_set_alpn_protos so they will compile on MSVC and AIX cc. Thanks to AGRUNDMA. Fixed typos in documentation for X509_NAME_new and X509_NAME_hash incorrect version 1.45 instead of 1.55 given. Version number in META.yml is now quoted per request from Satoshi Yagi.
2015-09-18Removewiz1-5/+1
PERL5_MODULE_TYPE= Module::Install::Bundled in the hope it fixes PR 50254. While here, remove API depends line that's lower than what's in openssl/bl3.mk.
2015-07-12Comment out dependencies of the stylewiz1-2/+2
{perl>=5.16.6,p5-ExtUtils-ParseXS>=3.15}:../../devel/p5-ExtUtils-ParseXS since pkgsrc enforces the newest perl version anyway, so they should always pick perl, but sometimes (pkg_add) don't due to the design of the {,} syntax. No effective change for the above reason. Ok joerg
2015-06-30Update to 1.70:wiz2-7/+6
1.70 2015-06-26 Patch from Alexander Bluhm: The new OpenSSL 1.0.2 X509_check_* functions are not available in current LibreSSL. So disable them in SSLeay.xs. Fixed a problem with building against OSX homebrew's openssl. Patch from Shoichi Kaji. Removed a test in t/local/33_x509_create_cert.t which fails due to changes in 1.0.1n and later
2015-06-12Recursive PKGREVISION bump for all packages mentioning 'perl',wiz1-1/+2
having a PKGNAME of p5-*, or depending such a package, for perl-5.22.0.
2015-06-07Update to 1.69:wiz2-6/+6
1.69 2015-06-04 Testing with OpenSSL 1.0.2, 1.0.2a. OK. Completed LibreSSL compatibility with the kind assistance of Alexander Bluhm. Improved compatibility with OpenSSL 1.0.2a as suggested by Petr Pisar. Added the X509_check_* functions introduced in OpenSSL 1.0.2, contributed by Carsten Gaebler. Added support for X509_V_FLAG_TRUSTED_FIRST constant, patch from Gisle Aas. Patch allows get_keyblock_size to work correctly with OpenSSL 1.0.1 and later versions. Contributed by Heikki Vatiainen.
2015-01-25Update to 1.68:wiz2-6/+6
1.68 2015-01-24 Fixed a problem on OSX when macports openssl 1.x is installed: headers from macport were found but older OSX openssl libraries were linked, resulting in "Symbol not found: _EVP_MD_do_all_sorted". Added notes about runtime error "no OPENSSL_Applink", when calling Net::SSLeay::P_PKCS12_load_file.
2015-01-18Update to 1.67:wiz2-6/+6
1.67 2015-01-17 Improvements to inc/Module/Install/PRIVATE/Net/SSLeay.pm to handle the case whe there are muliple OPENSSLs installed. Patch from HBRAND Fixed a documentation error in get_peer_cert_chain, reported by tejas. Fixed a problem with building on Windows that prevented correct OpenSSL directory detection with version 1.0.1j as delivered with Shining Light OpenSSL. Fixed a problem with building on Windows that prevented finding MT or MD versions of SSL libraries. Updated doc in README.Win32 to build with Microsoft Visual Studio 2010 Express. Added Windows crypt32 library to Windows linking as some compilers/platforms seem to require it and it is innocuous otherwise. For Steve Hay. Fixed a failure in t/external/20_cert_chain.t where some platforms do not have HTTPS in /etc/services. Reported and patched by Gisle Aas. Recent 1.0.2 betas have dropped the SSLv3_method function. This patch leaves out the function on newer versions, much the same as the SSLv2 deprecation is handled. Patch from Tom Molesworth. Fix the ALPN test, which was incorrectly failing on OpenSSL due to the LibreSSL check (earlier versions bailed out before that line).Patch from Tom Molesworth.
2014-10-09Remove pkgviews: don't set PKG_INSTALLATION_TYPES in Makefiles.wiz1-3/+1
2014-10-09Remove SVR4_PKGNAME, per discussion on tech-pkg.wiz1-2/+1
2014-09-06Update to 1.66:wiz2-6/+6
1.66 2014-08-21 Fixed compile problem with perl prior to 5.8.8, similar to RT#76267. Reported by Graham Knop. Fixed a problem with Socket::IPPROTO_TCP on early perls. After discussions with the community and the original author Sampo Kellomaki, the license conditions have been changed to "Perl Artisitic License 2.0". 1.65 2014-07-14 Added note to doc to make it clear that X509_get_subjectAltNames returns a packed binary IP address for type 7 - GEN_IPADD. Improvements to SSL_OCSP_response_verify to compile under non c99 compilers. Requested by MERIJNB. Port to Android, contributed by Brian Fraser. Includes Android specific version of RSA_generate_key. Added LibreSSL support, patch provided by Alexander Bluhm. Thanks! Patch that fixes the support for SSL_set_info_callback and adds SSL_CTX_set_info_callback and SSL_set_state. Support for these functions is necessary to either detect renegotiation or to enforce renegotiation. Contributed by Steffen Ullrich. Thanks! Fixed a problem with SSL_set_state not available on some early OpenSSLs, patched by Steffen Ullrich. Thanks! Removed arbitrary size limits from calls to tcp_read_all in tcpcat() and http_cat(). Removed unnecessary Debian_SPANTS.txt from MANIFEST. Again. 1.64 2014-06-11 Fixes for test ocsp.t. Test now does not fail if HTTP::Tiny is not installed. Fixed repository in META.yml. Fixed a problem with SSL_get_peer_cert_chain: if the SSL handshake results in an anonymous authentication, like ADH-DES-CBC3-SHA, get_peer_cert_chain will not return an empty list, but instead return the SSL object. Reported and fixed by Steffen Ullrich. Thanks. Fixed a problem where patch https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=3009244da47b989c4cc59ba02cf81a4e9d8f8431 caused a failed test in t/local/33_x509_create_cert.t.
2014-06-09Update to 1.63. From the changelog:schmonz2-7/+6
* Fixed error in version number in META.yml * Improvements to OCSP support: It turns out that some CA (like Verisign) sign the OCSP response with the CA we have in the trust store and don't attach this certifcate in the response. But OpenSSL by itself only considers the certificates included in the response and SSL_OCSP_response_verify added the certificates in the chain too. Now, we also add the trusted CA from the store which signed the lowest chain certificate, at least if we could not verify the OCSP response without doing it. Patch from Steffen Ullrich. Thanks. * Fixed some compiler warnings.
2014-05-29Bump for perl-5.20.0.wiz1-1/+2
Do it for all packages that * mention perl, or * have a directory name starting with p5-*, or * depend on a package starting with p5- like last time, for 5.18, where this didn't lead to complaints. Let me know if you have any this time.
2014-05-15Update to 1.61 and set LICENSE.wiz2-7/+7
1.61 2014-05-12 Changes calloc to Newx and free to Safefree, otherwise there might be problems because calloc is done from a different memory pool than free (depends on the build options for perl, but seen on Windows). Patch from Steffen Ullrich. Thanks. 1.60 2014-05-10 Fixed a typo in an error message. Patch from gregor herrmann. Thanks. Fixed a problem with building with openssl that does not support OCSP. Also fixed some newly introduced warnings if compiled with -Wall. Patch from Steffen Ullrich. Thanks. fix build-failure on most Debian architectures: SSLeay.xs: In function 'XS_Net__SSLeay_OCSP_response_results': SSLeay.xs:5602:3: error: format not a string literal and no format arguments. Patch from gregor herrmann. 1.59 2014-05-10 Fixed local/30_error.t, so that tests do not fail if diagnostics are enabled. Fixed error messages about undefined strings used with length or split. Reported and patched by Peter Heuchert. Improvements to configuration of OPTIMIZE flags, to prevent overriding of perls expected optimization flags. Caution: HPUX aCC optimize options are special. SSL_peek() now returns openssl error code as second item when called in array context, same as SSL_read. Patch from Andreas Mohr. Fixed some warnings. Added support for tlsv1.1 tlsv1.2 via $Net::SSLeay::ssl_version. Patch from Andreas Mohr. Improve examples in 'Using other perl modules based on Net::SSLeay'. Patched by Andreas Mohr. Added support for OCSP. Patched by Steffen Ullrich. Thanks! Added missing t/external/ocsp.t
2014-02-16Updating package for Perl5 module Net::SSLeay in CPAN insno2-7/+6
security/p5-Net-SSLeay from 1.55nb1 to 1.58. Upstream changes: 1.58 2014-01-15 Always use size_t for strlen() return value, requested by Alexander Bluhm. t/external/20_cert_chain.t was missing from dist. Version number in META.yml was incorrect Improvements to test t/external/20_cert_chain.t to provoke following bug: Fixed crash due to SSL_get_peer_cert_chain incorrectly free'ing the chain after use. Fixed a problem when compiling against openssl where OPENSSL_NO_EC is set. 1.57 2014-01-09 Fixed remaining problems with test suite: pod coverage and kwalitee tests are only enabled with RELEASE_TESTING=1 1.56 2014-01-08 Fixed a typo in documentation of BEAST Attack, patched by gregor herrmann. Added LICENSE file copied form OpenSSL distribution to prevent complaints from various versions of kwalitee. Adjusted license: in META.yml to be 'openssl' Adds support for the basic operations necessary to support ECDH for PFS, e.g. EC_KEY_new_by_curve_name, EC_KEY_free and SSL_CTX_set_tmp_ecdh. Improvements to t/handle/external/50_external.t to handle the case when a test connection was not possible. Patched by Alexandr Ciornii. Added support for ALPN TLS extension. Patch from Lubomir Rintel. Tested with openssl-1.0.2-stable-SNAP-20131205. Fix an use-after-free error. Patch from Lubomir Rintel. Fixed a problem with Invalid comparison on OBJ_cmp result in t/local/36_verify.t. Contributed by paul. Added support for get_peer_cert_chain(). Patch by Markus Benning. Fixed a bug that cold cause stack faults: mixed up PUTBACK with SPAGAIN in ssleay_RSA_generate_key_cb_invoke() a final PUTBACK is needed here. A second issue is also fixed: cb->data defaults to &PL_sv_undef but throught the code you do not check against &PL_sv_undef, just NULL. To avoid passing the 3rd optional arg at all, do not create it. This fixes all the cb->data checks and wrong refcounts on &PL_sv_undef. Patched by Reini Urban. Deleted support for SSL_get_tlsa_record_byname: it is not included in OpenSSL git master.
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron1-1/+2
2013-09-05Update to 1.55:wiz2-7/+6
1.55 2013-06-08 Added support for TLSV1_1 and TLSV1_2 methods with SSL_CTX_tlsv1_1_new(), SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and TLSv1_2_method(), where available in the underlying openssl. Added CRL support functions X509_CRL_get_ext(), X509_CRL_get_ext_by_NID(), X509_CRL_get_ext_count(). Patch from Franck Youssef. Fixed a problem which could cause content with a value of '0' to not be correctly encoded by do_httpx3 and friends. Reported by Victor Efimov via RT. Added support for SSL_get_tlsa_record_byname() required for DANE support in openssl-1.0.2 and later. SSL_get_tlsa_record_byname() was added to OpenSSL with the financial assistance of .SE. Testing with openssl-1.0.2-stable-SNAP-20130521. Added X509_NAME_new and X509_NAME_hash, patched by Franck Youssef.
2013-05-31Bump all packages for perl-5.18, thatwiz1-1/+2
a) refer 'perl' in their Makefile, or b) have a directory name of p5-*, or c) have any dependency on any p5-* package Like last time, where this caused no complaints.
2013-04-19Update Net-SSLeay to 1.54.hiramatsu2-7/+6
Changes from previous: ---------------------- 1.54 2013-03-23 t/data/testcert_cdp.crt.pem_dump and t/data/testcert_cdp.crt.pem were missing from MANIFEST. Added MANIFEST to svn Improvement to test 07_sslecho.t so that if set_cert_and_key fails we can tell why. 1.53 2013-03-22 Added support for SSL_export_keying_material where present (ie in OpenSSL 1.0.1 and later). Changed t/handle/external/50_external.t to use www.airspayce.com instead of perldition.org, who no longer have an https server. Patch to fix a crash: P_X509_get_crl_distribution_points on an X509 certificate with values in the CDP extension which do not have an ia5 string will cause a segmentation fault when accessed. Patch from Robert Duncan. Change in t/local/32_x509_get_cert_info.t to not use Net::SSLeay::ASN1_INTEGER_get, since it works differntly on 32 and 64 bit platforms. Updated author and distribution location details to airspayce.com 1.52 2013-01-09 Rebuild package with gnu format tar, to prevent problems with unpacking on other systems such as old Solaris, 1.51 2012-12-14 Fixed a problem where SSL_set_SSL_CTX is not available with OpenSSL < 0.9.8f. Reported by Paul. 1.50 2012-12-13 Fixed a problem where t/handle/external/50_external.t would crash if any of the test sites were not contactable. Now builds on VMS. Patch kindly supplied by Craig A. Berry. Fixed a few compiler warnings in SSLeay.xs. Most of them are just signed/unsigned pointer mismatches but there is one that actually fixes returning what would be an arbitrary value off the stack from get_my_thread_id if it happened to be called in a non-threaded build. Patch kindly supplied by Craig A. Berry. Added README.VMS, contributed by Craig A. Berry. Added SSL_set_tlsext_host_name, SSL_get_servername, SSL_get_servername_type, SSL_CTX_set_tlsext_servername_callback for server side Server Name Indication (SNI) support. Patched by kmx. Further mods for VMS building supplied by Craig A. Berry. Fixed a problem with C++ comments preventing builds on AIX and HPUX. Patched by Gisle Aas. perdition.org not available for tests, changed to www.airspayce.com Added SSL_FIPS_mode_set Improvements to test suite so it succeeds with and without FIPS mode enabled. Patch supplied by Petr Pisar. Added documentation, warning not to pass UTF-8 data in the content argument to post_https. Reported by Jason Terry.
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin1-1/+2
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-2/+1
2012-10-21Update to 1.49:wiz2-7/+6
1.49 2012-09-25 Fixed problem where on some platforms test t/local/07_tcpecho.t would bail out if it could not bind port 1212. Now now tries a number of ports to bind to until successful. Improvements to unsigned casting contributed by Reini Urban. Improvements to Net::SSLeay::read to make it easier to use with non-blocking IO: contributed by James Marshall: It modifies Net::SSLeay::read() to return the result from SSL_read() as the second return value, if Net::SSLeay::read() is called in list context. Its behavior should be unchanged if called in scalar or void context. This result code seems to be required for full support of non-blocking I/O, since users need to handle SSL_ERR_WANT_READ, SSL_ERROR_WANT_WRITE, etc. Fixed a problem where t/local/kwalitee.t fails with Module::CPANTS::Analyse 0.86. Patch from Paul. Fixed a number of typos patched by Giles. Fixed a compiler warning from Compiling with gcc-4.4 and -Wall, patched by Giles. Fixed problems with get_https4: documentation was wrong, $header_ref was not correctly set and $server_cert was not returned. Fixed a problem that could cause a Perl exception about no blength method on undef. Reported by "Stephen J. Smith via RT". https://rt.cpan.org/Ticket/Display.html?id=79309 Added documentation about how to mitigatxe various SSL/TLS vulnerabilities. Fixed problem reported by Mike Doherty: SSL_MODE_* are defined in ssl.h, and should be available as constants, but I do not see them listed in constants.h
2012-10-03Bump all packages that use perl, or depend on a p5-* package, orwiz1-1/+2
are called p5-*. I hope that's all of them.
2012-05-31Updating package for CPAN module Net::SSLeay in security/p5-Net-SSLeaysno2-6/+6
from 1.45 to 1.48. Upstream changes since 1.45: 1.48 2012-04-25 Removed unneeded Debian_CPANTS.txt from MANIFEST. Fixed incorrect documentation about the best way to call CTX_set_options. Fixed problem that caused Undefined subroutine utf8::encode @ t/local/33_x509_create_cert.t (on perl 5.6.2). Thanks to kmx. In examples and pod documentations, changed #!/usr/local/bin/perl to #!/usr/bin/perl. t/local/06_tcpecho.t now tries a number of ports to bind to until successful. 1.47 2012-04-04 Fixed overlong lines in pod, patch from Salvatore Bonaccorso, Debian Perl Group Fixed spelling errors in pod, patch from Salvatore Bonaccorso, Debian Perl Group Fixed extra "garbage" files in 1.46 tarball. Patch from kmx. Fixed incorrect fail reports on some 64 bit platforms. Patch from paul. Fix to avoid FAIL reports from cpantesters with missing openssl Use my_snprintf from ppport.h to prevent link failures with perl 5.8 and earlier when compiled with MSVC. 1.46 2012-04-03 Fixed a problem reported by Atoomic: When bootstrapping Net::SSleay ( with DynaLoader ) if you override the SIG{DIE} signal, using Net::SSLeay will result in an error. Recreated META.yml, added META.yml to dist Fixed typo: the word "corresponding" was mis-spelled as "coresponding" throughout the POD. Patched by kmx. Updated META.yml to include repository and bugtracker Constants cleanup - removing non existing constants (perhaps from pre-0.9.6 era) - kmx Automatic constants.c generation via helper_script/regen_openssl_constants.pl - kmx Future changes in constants now under better control via t/local/21_constants.t - kmx Added missing new files Reordering @EXPORT_OK (constants first, functions next) - kmx Adding missing 51 constants to @EXPORT_OK + test to keep it in sync - kmx Instructions "howto add new constant" added to helper_script/regen_openssl_constants.pl - kmx NEWLY INTRODUCED CONSTANTS: - Net::SSLeay::ASN1_STRFLGS_ESC_CTRL - Net::SSLeay::ASN1_STRFLGS_ESC_MSB - Net::SSLeay::ASN1_STRFLGS_ESC_QUOTE - Net::SSLeay::ASN1_STRFLGS_RFC2253 - Net::SSLeay::ERROR_WANT_ACCEPT - Net::SSLeay::EVP_PKS_DSA - Net::SSLeay::EVP_PKS_EC - Net::SSLeay::EVP_PKS_RSA - Net::SSLeay::EVP_PKT_ENC - Net::SSLeay::EVP_PKT_EXCH - Net::SSLeay::EVP_PKT_EXP - Net::SSLeay::EVP_PKT_SIGN - Net::SSLeay::EVP_PK_DH - Net::SSLeay::EVP_PK_DSA - Net::SSLeay::EVP_PK_EC - Net::SSLeay::EVP_PK_RSA - Net::SSLeay::MBSTRING_ASC - Net::SSLeay::MBSTRING_BMP - Net::SSLeay::MBSTRING_FLAG - Net::SSLeay::MBSTRING_UNIV - Net::SSLeay::MBSTRING_UTF8 - Net::SSLeay::OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION - Net::SSLeay::OP_CISCO_ANYCONNECT - Net::SSLeay::OP_CRYPTOPRO_TLSEXT_BUG - Net::SSLeay::OP_LEGACY_SERVER_CONNECT - Net::SSLeay::OP_NO_TLSv1_1 - Net::SSLeay::OP_NO_TLSv1_2 - Net::SSLeay::OP_SINGLE_ECDH_USE - Net::SSLeay::OP_TLS_BLOCK_PADDING_BUG - Net::SSLeay::X509_V_FLAG_CHECK_SS_SIGNATURE - Net::SSLeay::X509_V_FLAG_EXTENDED_CRL_SUPPORT - Net::SSLeay::X509_V_FLAG_POLICY_MASK - Net::SSLeay::X509_V_FLAG_USE_DELTAS - Net::SSLeay::X509_V_OK - Net::SSLeay::XN_FLAG_COMPAT - Net::SSLeay::XN_FLAG_DN_REV - Net::SSLeay::XN_FLAG_DUMP_UNKNOWN_FIELDS - Net::SSLeay::XN_FLAG_FN_ALIGN - Net::SSLeay::XN_FLAG_FN_LN - Net::SSLeay::XN_FLAG_FN_MASK - Net::SSLeay::XN_FLAG_FN_NONE - Net::SSLeay::XN_FLAG_FN_OID - Net::SSLeay::XN_FLAG_FN_SN - Net::SSLeay::XN_FLAG_MULTILINE - Net::SSLeay::XN_FLAG_ONELINE - Net::SSLeay::XN_FLAG_RFC2253 - Net::SSLeay::XN_FLAG_SEP_COMMA_PLUS - Net::SSLeay::XN_FLAG_SEP_CPLUS_SPC - Net::SSLeay::XN_FLAG_SEP_MASK - Net::SSLeay::XN_FLAG_SEP_MULTILINE - Net::SSLeay::XN_FLAG_SEP_SPLUS_SPC - Net::SSLeay::XN_FLAG_SPC_EQ A number of tests were present in svn, but missing from MANIFEST, and were therefore not included in the dist. Added. NEWLY INTRODUCED FUNCTIONS: - Net::SSLeay::ASN1_INTEGER_free - Net::SSLeay::ASN1_INTEGER_get - Net::SSLeay::ASN1_INTEGER_new - Net::SSLeay::ASN1_INTEGER_set - Net::SSLeay::EVP_PKEY_assign_RSA - Net::SSLeay::EVP_PKEY_bits - Net::SSLeay::EVP_PKEY_free - Net::SSLeay::EVP_PKEY_new - Net::SSLeay::EVP_PKEY_size - Net::SSLeay::EVP_get_cipherbyname - Net::SSLeay::OPENSSL_add_all_algorithms_conf - Net::SSLeay::OPENSSL_add_all_algorithms_noconf - Net::SSLeay::OpenSSL_add_all_algorithms - Net::SSLeay::PEM_get_string_PrivateKey - Net::SSLeay::PEM_get_string_X509_CRL - Net::SSLeay::PEM_get_string_X509_REQ - Net::SSLeay::PEM_read_bio_PrivateKey - Net::SSLeay::PEM_read_bio_X509 - Net::SSLeay::PEM_read_bio_X509_REQ - Net::SSLeay::P_ASN1_INTEGER_get_dec - Net::SSLeay::P_ASN1_INTEGER_get_hex - Net::SSLeay::P_ASN1_INTEGER_set_dec - Net::SSLeay::P_ASN1_INTEGER_set_hex - Net::SSLeay::P_ASN1_STRING_get - Net::SSLeay::P_X509_CRL_add_revoked_serial_hex - Net::SSLeay::P_X509_CRL_get_serial - Net::SSLeay::P_X509_CRL_set_serial - Net::SSLeay::P_X509_REQ_add_extensions - Net::SSLeay::P_X509_REQ_get_attr - Net::SSLeay::P_X509_add_extensions - Net::SSLeay::P_X509_copy_extensions - Net::SSLeay::P_X509_get_crl_distribution_points - Net::SSLeay::P_X509_get_ext_key_usage - Net::SSLeay::P_X509_get_key_usage - Net::SSLeay::P_X509_get_netscape_cert_type - Net::SSLeay::P_X509_get_pubkey_alg - Net::SSLeay::P_X509_get_signature_alg - Net::SSLeay::P_PKCS12_load_file - Net::SSLeay::X509V3_EXT_print - Net::SSLeay::X509_CRL_digest - Net::SSLeay::X509_CRL_free - Net::SSLeay::X509_CRL_get_issuer - Net::SSLeay::X509_CRL_get_lastUpdate - Net::SSLeay::X509_CRL_get_nextUpdate - Net::SSLeay::X509_CRL_get_version - Net::SSLeay::X509_CRL_new - Net::SSLeay::X509_CRL_set_issuer_name - Net::SSLeay::X509_CRL_set_lastUpdate - Net::SSLeay::X509_CRL_set_nextUpdate - Net::SSLeay::X509_CRL_set_version - Net::SSLeay::X509_CRL_sign - Net::SSLeay::X509_CRL_sort - Net::SSLeay::X509_CRL_verify - Net::SSLeay::X509_EXTENSION_get_critical - Net::SSLeay::X509_EXTENSION_get_data - Net::SSLeay::X509_EXTENSION_get_object - Net::SSLeay::X509_NAME_ENTRY_get_data - Net::SSLeay::X509_NAME_ENTRY_get_object - Net::SSLeay::X509_NAME_add_entry_by_NID - Net::SSLeay::X509_NAME_add_entry_by_OBJ - Net::SSLeay::X509_NAME_add_entry_by_txt - Net::SSLeay::X509_NAME_cmp - Net::SSLeay::X509_NAME_digest - Net::SSLeay::X509_NAME_entry_count - Net::SSLeay::X509_NAME_get_entry - Net::SSLeay::X509_NAME_print_ex - Net::SSLeay::X509_REQ_add1_attr_by_NID - Net::SSLeay::X509_REQ_digest - Net::SSLeay::X509_REQ_free - Net::SSLeay::X509_REQ_get_attr_by_NID - Net::SSLeay::X509_REQ_get_attr_by_OBJ - Net::SSLeay::X509_REQ_get_attr_count - Net::SSLeay::X509_REQ_get_pubkey - Net::SSLeay::X509_REQ_get_subject_name - Net::SSLeay::X509_REQ_get_version - Net::SSLeay::X509_REQ_new - Net::SSLeay::X509_REQ_set_pubkey - Net::SSLeay::X509_REQ_set_subject_name - Net::SSLeay::X509_REQ_set_version - Net::SSLeay::X509_REQ_sign - Net::SSLeay::X509_REQ_verify - Net::SSLeay::X509_certificate_type - Net::SSLeay::X509_digest - Net::SSLeay::X509_get_ext_count - Net::SSLeay::X509_get_pubkey - Net::SSLeay::X509_get_serialNumber - Net::SSLeay::X509_get_version - Net::SSLeay::X509_issuer_and_serial_hash - Net::SSLeay::X509_issuer_name_hash - Net::SSLeay::X509_new - Net::SSLeay::X509_pubkey_digest - Net::SSLeay::X509_set_issuer_name - Net::SSLeay::X509_set_pubkey - Net::SSLeay::X509_set_serialNumber - Net::SSLeay::X509_set_subject_name - Net::SSLeay::X509_set_version - Net::SSLeay::X509_sign - Net::SSLeay::X509_subject_name_hash - Net::SSLeay::X509_verify - Net::SSLeay::d2i_X509_CRL_bio - Net::SSLeay::d2i_X509_REQ_bio - Net::SSLeay::d2i_X509_bio - Net::SSLeay::set_tlsext_host_name - Net::SSLeay::CTX_set_next_protos_advertised_cb - Net::SSLeay::CTX_set_next_proto_select_cb - Net::SSLeay::P_next_proto_negotiated - Net::SSLeay::P_next_proto_last_status Fixed a problem with multiple Safefree of GLOBAL_openssl_mutex when run under apache2+mod_perl on recent Debain distros. Removed END and openssl_threads_cleanup() since they can be called during thread destruction, and not necessarily at process exit time. Added missing helper_script/regen_openssl_constants.pl to MANIFEST. Add MANIFEST to svn. Fixed reported errors about try to plan twice in 21_constants.t on some platforms. Removed MANIFEST from svn, improve possibility to use Module::Install in Net-SSleay distribution in usual way. new target for make manifest Fix 2 issues with CTX_use_PKCS12_file 1/ leaking memory - missing EVP_PKEY_free + X509_free 2/ pkcs12 filesize limitation Fixed problems with regenerating scripts in Makefile.PL Added missing dependencies for SSLeay.o to Makefile.PL Added missing test files to svn Fixed calling convention for Net::SSLeay::get_shared_ciphers + test + doc update Added coding guidelines to SSLeay.xs Fix for serial number issue. Major patch to refactor callback code to make it more extensible and remove duplicate code. Thanks to kmx. Fixed a problem in t/local/07_sslecho.t when running on openssl-0.9.6 Fixed pod parsing errors reported by Olivier Mengué Better prevention of leaking SVs in the new callback stuff Debug messages in SSLeay.xs can be enabled by: perl Makefile.PL DEFINE=-DSHOW_XS_DEBUG Fixing X509_NAME_oneline (calling OPENSSL_free at the right place) Fixed a problem with crashing when run under apache2+modssl+modperl on Debian Wheezy. Now detects if it is running under ModPerl and uses ModSSLs thread locking instead. Added more debg printing. Enable with perl Makefile.PL DEFINE=-DSHOW_XS_DEBUG Added NPN support, thanks to kmx Added t/local/40_npn_support.t tests for new NPN support Fixed some compiler warnings. Courtesy kmx. Fixed a problem with Win32 detection. Courtesy kmx.
2012-03-05Updating package for CPAN distribution Net::SSLeay in security/p5-Net-SSLeaysno2-6/+6
from 1.42 to 1.45. Upstream changes: 1.45 2012-02-25 Added mising doc for SESSION_cmp. Patch by paul. 1.44 2012-02-25 Added missing t/data/binary-test.file to MANIFEST 1.43 2012-02-24 Fixed some typos. Patched by Neil Bowers. SSLeay.pm convenience functions now call Net::SSLeay::initialize that initializes the SSL library at most once. Patch from kmx to protect SSLeay_add_ssl_algorithms from multiple loads and reentrancy in multi-threaded perls. Patch from kmx to add reentrancy protection for callbacks in multithreading. Updated ppport.h, fixed some complaints from ppport.h Fixed a problem with CTX_use_PKCS12_file on Windows, since the file was not opened in binary mode. Reported by kmx. Added resources line for SVN repository to Makefile. Suggested by kmx. Fixed complaints unders some windows compilers about cast from pointer to integer of different size. Suggested by kmx. Added thread safety and dynamic locking. This should complete thread safety work, making Net::SSLeay completely thread-safe. Patches by kind assistance of kmx. Improvements to openssl backwards compatibility. Now build with versions back to 0.9.6. With extreme thanks to kmx. Improvements to documentation, thanks to kmx. SUMMARY OF NEWLY INTRODUCED FUNCTIONS: - Net::SSLeay::initialize - Net::SSLeay::SSLeay - Net::SSLeay::SSLeay_version - Net::SSLeay::SSLeay_version - Net::SSLeay::ASN1_TIME_new - Net::SSLeay::ASN1_TIME_free - Net::SSLeay::ASN1_TIME_set - Net::SSLeay::P_ASN1_TIME_get_isotime - Net::SSLeay::P_ASN1_TIME_set_isotime - Net::SSLeay::P_ASN1_TIME_put2string - Net::SSLeay::OpenSSL_add_all_digests - Net::SSLeay::P_EVP_MD_list_all - Net::SSLeay::EVP_get_digestbyname - Net::SSLeay::EVP_MD_type - Net::SSLeay::EVP_MD_size - Net::SSLeay::EVP_MD_CTX_md - Net::SSLeay::EVP_MD_CTX_create - Net::SSLeay::EVP_MD_CTX_destroy - Net::SSLeay::EVP_DigestInit - Net::SSLeay::EVP_DigestInit_ex - Net::SSLeay::EVP_DigestUpdate - Net::SSLeay::EVP_DigestFinal - Net::SSLeay::EVP_DigestFinal_ex - Net::SSLeay::EVP_Digest - Net::SSLeay::SHA1 - Net::SSLeay::SHA256 - Net::SSLeay::SHA512 - Net::SSLeay::EVP_sha1 - Net::SSLeay::EVP_sha512 Fixed a problem with set_proxy where the password was not properly set. The code to do this went missing at some stage. Reported by Ulrich Weber via RT. Further improvements to testing time functions. Added t/local/37_asn1_time.t Added various digest functions, documentation and tests Removed debug from P_ASN1_TIME_get_isotime. Courtesy kmx. Remove unnecessary warnings about Random number generator not seeded. Courtesy kmx. Fixed an error in 04_basic.t triggered if Test::Exception not present. Added documentation for many CTX_ functions. Courtesy kmx. Fixed mionor typos in SSLeay.xs. Courtesy kmx. Moved documentation to new lib/Net/SSLeay.pod. Courtesy kmx. Additions to documentation in pod. Courtesy kmx. Fixed some incorrect return types from SSL_set_options SSL_CTX_set_options. Courtesy kmx. Further documentation in pod. Courtesy kmx. Small fixes to XS code + one new trivial function SSL_CIPHER_get_name And one more thing - 02_pod_coverage.t is turned ON passing all tests - never ever allow a new function without at least a short doc. Courtesy kmx. Removed 2 unnecessary 'local $[;' from SSLeay.pm
2012-02-221.42pettai2-7/+6
Fixed incorrect documentation of how to enable CRL checking. Fixed incorrect letter in Sebastien in Credits. Reversed order of the Changes file to be reverse chronological. Fixed a a compile error when building on Windows with MSVC6. 1.41 Fixed incorrect const signatures for 1.0 that were causing warnings. Now have clean compile with 0.9.8a through 1.0.0. 1.40 Fixed incorrect argument type in call to SSL_set1_param Fixed a number of issues with pointer sizes Removed redundant pointer cast tests from t/ Added Perl version requirements to SSLeay.pm 1.39 Downgraded Module::Install to 0.93 since 1.01 was causing problems in the Makefile. 1.38 - Fixed a problem with various symbols that only became available in OpenSSL 0.9.8 such as X509_VERIFY_PARAM and X509_POLICY_NODE, causing build failures with older versions of OpenSSL. 1.37 - Added X509_get_fingerprint, contributed by Thierry Walrant (with minor changes die to the fact that stricmp is not avialable. Cert types must be lowercase. Also added test to 07_sslecho.t - Added suport for SSL_CTX_set1_param, SSL_set1_param, selected X509_VERIFY_PARAM_* OBJ_* functions. Added new test t/local/36_verify.t - Fixed an uninitialized value warning in $Net::SSLeay::proxyauth - Update so net-ssleay will compile if SSLV2 is not present. - Fixed a problem where sslcat (and possibly other functions) expect RSA keys and will not load DSA keys for client certificates. - Removed SSL_CTX_v2_new and SSLv2_method() for OpenSSL 1.0 and later. - Added CTX_use_PKCS12_file contributed by "Andrew A. Budkin".
2011-08-14Revision bump after updating perl5 to 5.14.1.obache1-2/+2
2010-08-21Bump the PKGREVISION for all packages which depend directly on perl,seb1-2/+2
to trigger/signal a rebuild for the transition 5.10.1 -> 5.12.1. The list of packages is computed by finding all packages which end up having either of PERL5_USE_PACKLIST, BUILDLINK_API_DEPENDS.perl, or PERL5_PACKLIST defined in their make setup (tested via "make show-vars VARNAMES=..."), minus the packages updated after the perl package update. sno@ was right after all, obache@ kindly asked and he@ led the way. Thanks!
2010-02-02Updating security/p5-Net-SSLeay from 1.35nb2 to 1.36sno4-71/+11
pkgsrc changes: - Adjusting dependencies - Removing compatibility patches which are all applied upstream Upstream changes: 1.36 30.01.2010 - Fix problems with building on GNU/kFreeBSD, to do with use of pack instread of sockaddr_in. Patched by Debian Perl Group. (Closes RT#40144) - Fixed a compile problem in t/local/ptr_cast_test.c for some gcc versions. Reported by "Ryan McGuigan via RT". (Closes RT#52525) - Improved OpenSSL detection on Win32/strawberry perl. Patch provided by kmx. (Closes RT#49287) - Fix test failures on some 64-bit platforms. (Closes RT#53585) - Make X509_NAME_get_text_by_NID return its result without a trailing NUL. Patched by Steffen Ullrich. (Closes RT#35754) - SSL_set_session_secret_cb required for EAP-FAST is now enabled for both SSL_F_SSL_SET_HELLO_EXTENSION and SSL_F_SSL_SET_SESSION_TICKET_EXT. The name of this #define changed after 0.9.8i. SSL_set_hello_extension is not available after 0.9.8i. - Added SSL_CTX_get_client_CA_list sk_X509_NAME_free sk_X509_NAME_num sk_X509_NAME_value SSL_get_client_CA_list, from patch provided by Joerg Schneider - Added EVP_add_digest and EVP_sha256 (if available) - Improve documentation on callback functions. - Stop looping forever when writing to broken connections. Patched by Martin Mares. (Closes RT#44170) - Patches from "Martijn van Beers via RT" to add SSL_SENT_SHUTDOWN and SSL_RECEIVED_SHUTDOWN, remove broken URLs, and to fix some documentation issues. - Various changes to build with OpenSSL 1.0 beta1: SSL_SESSION_cmp has been removed return type of SSL_CTX_sessions changed in an ugly way - Fixed a build problem reported by SISYPHUS: On Windows Vista64, ActivePerl 5.10.0 (build 1004, x64), running 'nmake test', the process hangs forever when it comes to building the test executable (as the executable fails to build). - Applied patch from ecmenifee in to improve handling of errors in ssl_write_all. (Closes RT#48132) - Patch to permit compile and testing on OS/2 submitted by Ilya Zakharevich. - Fixed compile problems with openssl-1.0.0-beta3 due to MD2 now being optional. Reported by paul [...] city-fan.org. - Fixed compile problems with openssl-0.9.7 and earlier with undefined symbol EVP_sha256. Reported by paul [...] city-fan.org. - Fixed a typo reported by Dan Dascalescu. - added RIPEMD160 digest function. Patch provided by dkg.
2010-01-17Recursive PKGREVISION bump for jpeg update to 8.wiz1-2/+2
2009-07-30make this build with newer OpenSSL versionsdrochner3-1/+63
tested with: -1.0.0beta3 (which already identifies itself as 1.0.0) -the snapshot in NetBSD-current (identifies itself as 1.1.0) -the 0.9.8 we had in -current before
2008-10-19Bump the PKGREVISION for all packages which depend directly on perl,he1-1/+2
to trigger/signal a rebuild for the transition 5.8.8 -> 5.10.0. The list of packages is computed by finding all packages which end up having either of PERL5_USE_PACKLIST, BUILDLINK_API_DEPENDS.perl, or PERL5_PACKLIST defined in their make setup (tested via "make show-vars VARNAMES=...").
2008-08-03Update from version 1.32nb1 to 1.35. Changes:he2-8/+8
1.35 25.07.208 - Fix test plan for autoload.t if Test::Exception isn't available. - Skip rsa_generate_key.t if Test::Exception isn't available. 1.34 24.07.2008 - Fixed problem with X509_get_subjectAltNames, where some types of Alt Name (eg DIRNAMEs) were not properly handled, resulting in seg faults. Reported by Achim Grolms. - Added support for ENGINE_load_builtin_engines and ENGINE_register_all_complete in order to enable built-in OpenSSL crypto engines for hardware acceleration etc. - Added support for ENGINE_by_id and ENGINE_set_default, required to enable Sun crypto acceleration 1.33_01 14.02.2008 - Fixed a compile problem with inc_paths /usr/kerberos/include in inc/Module/Install/PRIVATE/Net/SSLeay.pm. Reported by "J. Nick Koston via RT" - Added optional support for SSL_set_hello_extension, SSL_set_session_secret_cb to support various extension patches from a patch to openssl-0.9.9-dev contributed by Jouni Malinen. See wpa_supplicant/patches/openssl-0.9.9-session-ticket.patch in the latest (git) version 0.6 and later of wpa_suplicant at http://hostap.epitest.fi/. These additions are ifdefed to SSL_F_SSL_SET_HELLO_EXTENSION which is added by the patch Tested with openssl-SNAP-20070816. - Added SSL_SESSION_set_master_key and SSL_get_keyblock_size. - Added all SSL_OP_* options flags present in 0.9.9 - Fixed a bug in SSL_set_tmp_dh - Doc improvements in README.Win32 - Fixed a problem with proxy connections: open_proxy_tcp_connection was stopping after the first \n from teh proxy, but instead should have looked for $CRLF . $CRLF to find the beginning of the SSL content - Fixed missing / on /usr/kerberos/include, reported by several people - removed bacus.pt from host list in t/handle/external/10_destroy.t, since it seems no longer to respond. Reported by tco2. - changed t/handle/external/10_destroy.t so this list of URIs to be tested can be configured with environment variable SSLEAY_URIS, a colon separated list of host names. Suggested by tco2. - changed t/handle/external/50_external.t and t/external/08_external.t so this list of sites to be tested can be configured with environment variable SSLEAY_SITES, a colon separated list of host names. Suggested by tco2. - Fixed doucumentation in README of how to use OPENSSL_PREFIX environment variable to control the location of openssl. Reported by "Quanah Gibson-Mount via RT". - Don't use Module::Installs auto_install. - Bind NID_ and GEN_ constants. - Default to not running external tests.
2008-01-18Per the process outlined in revbump(1), perform a recursive revbumptnn1-1/+2
on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@
2008-01-15Needs libz.rillig1-1/+2
From PR 37760.
2008-01-09Updated to version 1.32.heinz2-10/+18
Pkgsrc changes: - Requires p5-Test-Exception and p5-Test-Warn for building and p5-MIME-Base64 for running. The modules p5-Array-Compare, p5-Sub-Uplevel and p5-Tree-DAG_Node are only used through p5-Test-Warn. Opened bug id 32172 at rt.cpan.org for this. - Needs a C compiler. - Specified prefix for OpenSSL in order to avoid adding any search paths to inc/Module/Install/PRIVATE/Net/SSLeay.pm. - No more interactive questions (PERL_MM_USE_DEFAULT). Changes since version 1.30: =========================== - Mike McCauley and Florian Ragwitz maintain this module now 1.31_01 02.07.2007 - Only bind X509_STORE_set_trust #if OPENSSL_VERSION_NUMBER >= 0x0090800fL - Removed %Filenum_Objects from Net::SSLeay::Handle so unused handles will be freed. - Use ppport.h. - improved openssl path guessing, forcing openssl path now requires the -path flag (caution: incompatible flag change) Path guessing works on windows too. mikem, with patches from Stas Bekman - Added /usr/sfw/bin/openssl to path guessing for Open Solaris, suggested by Igor Boehme. - Fixed a problem with X509_get_subjectAltNames not working when the subjectAltNAmes are the first extension. Reported by Achim Grolms 1.31_02 14.07.2007 - Fix linking problems on Windows. Tested with VC++ 6.0, Shining Light 0.9.7L on Windows Server 2003 with ActivePerl 5.8.8.820. Also tested with OpenSSL 0.9.8e compiled from source. - Unable to get working systems when compiling with MS Visual Studio Express 2005. Contributions requested. This may be relevant: http://www.itwriting.com/blog/?postid=261&replyto=2542 - Fixed a number of minor compile warnings on Windows - Updated README.Win32 to define building procedures on Windows - Fixed incorrect test failure reports in 08_external. - Add parens to function calls in Makefile.PL to prevent warnings with some perls. - Tested on Sparc Solaris 8, Sparc Solaris 10, OpenSuSE 10.2 x64, OpenSuSE 10.0 x86, FreeBSD 6.0 x86, Ubuntu 6.10, Fedora Core 6 x86 - Changed type of SSL_set_info_callback args to stop compiler warnings on Windows - Removed auto_include from Makefile.PL - Removed build_requires('Test::NoWarnings') from Makefile.PL - Testing with Strawberry Perl on Windows XP SP2, added doc to README.Win32 - Testing with Perl CamelPack 5.8.7 on Windows XP SP2,added doc to README.Win32 1.32 03.08.2007 - Don't let the tests die when something unexpected happens. Just BAIL_OUT. - Some Win32 improvements.
2007-10-25Remove empty PLISTs from pkgsrc since revision 1.33 of plist/plist.mkjlam1-1/+0
can handle packages having no PLIST files.
2007-09-30Reset maintainer -- shell@ is inactive.wiz1-2/+2
2006-11-05DESTDIR support.joerg1-1/+2
2006-10-01The "test" phase is interactive.rillig1-1/+4
2006-03-12Updated to version 1.30.heinz2-10/+7
Pkgsrc changes: - The new release includes the patch by Peter Behroozi (already contained in Peter's unofficial release 1.26) that adds get1_session() for session caching. - Reverted to using MASTER_SITE_PERL_CPAN Changes since version 1.25: =========================== 1.30 21.12.2005 - Fixed the MD5 function for hashsums containing \0 - Fixed some compile warnings with recent gcc. - Fixed do_httpx3: + Don't add additional Host: headers if it's already given + Omit the :$port suffix for standard ports + Thanks to ivan-cpan-rt@420.am - Limit the chunk size when reading with tcp_read_all to 0x1000. This fixes various rt tickets. - Added patch to allow session caching - Mike McCauley and Florian Ragwitz maintain this module now
2005-08-06Bump the PKGREVISIONs of all (638) packages that hardcode the locationsjlam1-1/+2
of Perl files to deal with the perl-5.8.7 update that moved all pkgsrc-installed Perl files into the "vendor" directories.
2005-07-13Turn PERL5_PACKLIST into a relative path instead of an absolute path.jlam1-2/+2
These paths are now relative to PERL5_PACKLIST_DIR, which currently defaults to ${PERL5_SITEARCH}. There is no change to the binary packages.
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-02-24Add RMD160 digests.agc1-1/+2
2005-02-23Revert previous, fixed in perl5/module.mk.wiz1-5/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-17 01:40:18 +0000