[pkgsrc/trunk]: pkgsrc/security/p5-IO-Socket-SSL p5-IO-Socket-SSL: Update to ...

[nia <nia%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/0ab7cce759e6
branches:  trunk
changeset: 413875:0ab7cce759e6
user:      nia <nia%pkgsrc.org@localhost>
date:      Sun Mar 22 21:19:34 2020 +0000

description:
p5-IO-Socket-SSL: Update to 2.067

2.067 2020/02/14
- fix memory leak on incomplete handshake
  https://github.com/noxxi/p5-io-socket-ssl/issues/92
  Thanks to olegwtf
- add support for SSL_MODE_RELEASE_BUFFERS via SSL_mode_release_buffers
  This can decrease memory usage at the costs of more allocations
  https://rt.cpan.org/Ticket/Display.html?id=129463
- more detailed error messages when loading of certificate file failed
  https://github.com/noxxi/p5-io-socket-ssl/issues/89
- fix for ip_in_cn == 6 in verify_hostname scheme
  https://rt.cpan.org/Ticket/Display.html?id=131384
- deal with new MODE_AUTO_RETRY default in OpenSSL 1.1.1
- fix warning when no ecdh support is available
- documentation update regarding use of select and TLS 1.3
- various fixes in documentation
  https://github.com/noxxi/p5-io-socket-ssl/issues/91
  https://github.com/noxxi/p5-io-socket-ssl/issues/90
  https://github.com/noxxi/p5-io-socket-ssl/issues/87
  https://github.com/noxxi/p5-io-socket-ssl/issues/81
- stability fix t/core.t

2.066 2019/03/06
- fix test t/verify_partial_chain.t by using the newly exposed function
  can_partial_chain instead of guessing (wrongly) if the functionality is
  available

2.065 2019/03/05
- make sure that Net::SSLeay::CTX_get0_param is defined before using
  X509_V_FLAG_PARTIAL_CHAIN. Net::SSLeay 1.85 defined only the second with
  LibreSSL 2.7.4 but not the first
  https://rt.cpan.org/Ticket/Display.html?id=128716
- prefer AES for server side cipher default since it is usually
  hardware-accelerated

2.064 2019/03/04
- make algorithm for fingerprint optional, i.e. detect based on length of
  fingerprint - https://rt.cpan.org/Ticket/Display.html?id=127773
- fix t/sessions.t and improve stability of t/verify_hostname.t on windows
- use CTX_set_ecdh_auto when needed (OpenSSL 1.0.2) if explicit curves are set
- update fingerprints for live tests

2.063 2019/03/01
- support for both RSA and ECDSA certificate on same domain
- update PublicSuffix
- Refuse to build if Net::SSLeay is compiled with one version of OpenSSL but
  then linked against another API-incompatible version (ie. more than just the
  patchlevel differs).

2.062 2019/02/24
- Enable X509_V_FLAG_PARTIAL_CHAIN if supported by Net::SSLeay (1.83+) and
  OpenSSL (1.1.0+). This makes leaf certificates or intermediate certificates in
  the trust store be usable as full trust anchors too.

2.061 2019/02/23
- Support for TLS 1.3 session reuse. Needs Net::SSLeay 1.86+.
  Note that the previous (and undocumented) API for the session cache has been
  changed.
- Support for multiple curves, automatic setting of curves and setting of
  supported curves in client. Needs Net::SSLeay 1.86+.
- Enable Post-Handshake-Authentication (TLSv1.3 feature) client-side when
  client certificates are provided. Thanks to jorton[AT]redhat[DOT]com.
  Needs Net::SSLeay 1.86+.

diffstat:

 security/p5-IO-Socket-SSL/Makefile |   7 +++----
 security/p5-IO-Socket-SSL/distinfo |  10 +++++-----
 2 files changed, 8 insertions(+), 9 deletions(-)

diffs (38 lines):

diff -r 8e9f170d88bd -r 0ab7cce759e6 security/p5-IO-Socket-SSL/Makefile
--- a/security/p5-IO-Socket-SSL/Makefile        Sun Mar 22 21:17:30 2020 +0000
+++ b/security/p5-IO-Socket-SSL/Makefile        Sun Mar 22 21:19:34 2020 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.127 2019/08/11 13:22:57 wiz Exp $
+# $NetBSD: Makefile,v 1.128 2020/03/22 21:19:34 nia Exp $
 
-DISTNAME=      IO-Socket-SSL-2.060
+DISTNAME=      IO-Socket-SSL-2.067
 PKGNAME=       p5-${DISTNAME}
-PKGREVISION=   1
 CATEGORIES=    security net perl5
 MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=IO/}
 
@@ -13,7 +12,7 @@
 
 DEPENDS+=      p5-IO-Socket-INET6-[0-9]*:../../net/p5-IO-Socket-INET6
 DEPENDS+=      p5-Net-LibIDN-[0-9]*:../../net/p5-Net-LibIDN
-DEPENDS+=      p5-Net-SSLeay>=1.59:../../security/p5-Net-SSLeay
+DEPENDS+=      p5-Net-SSLeay>=1.86:../../security/p5-Net-SSLeay
 DEPENDS+=      p5-Mozilla-CA-[0-9]*:../../security/p5-Mozilla-CA
 
 USE_LANGUAGES=         # empty
diff -r 8e9f170d88bd -r 0ab7cce759e6 security/p5-IO-Socket-SSL/distinfo
--- a/security/p5-IO-Socket-SSL/distinfo        Sun Mar 22 21:17:30 2020 +0000
+++ b/security/p5-IO-Socket-SSL/distinfo        Sun Mar 22 21:19:34 2020 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.97 2018/10/02 01:03:33 wen Exp $
+$NetBSD: distinfo,v 1.98 2020/03/22 21:19:34 nia Exp $
 
-SHA1 (IO-Socket-SSL-2.060.tar.gz) = d00985ca87425ab5860bc38e59bcb9d39b372508
-RMD160 (IO-Socket-SSL-2.060.tar.gz) = 917366c7bbf33116d26e4ad3dc9c99c4a112fc83
-SHA512 (IO-Socket-SSL-2.060.tar.gz) = 1a1e29f8a4b912bd3643509356c66b3a567ae41bb0ac9eb30f6ca97eb68bf9507e20c0fb8512f5dfd309accd6cfba61811b8d637f5e991aaa0a250a906fcb95c
-Size (IO-Socket-SSL-2.060.tar.gz) = 233169 bytes
+SHA1 (IO-Socket-SSL-2.067.tar.gz) = aa82e352ad50e7ff979c6d8cea71f84505d554e3
+RMD160 (IO-Socket-SSL-2.067.tar.gz) = 554b03f9c2a010a207affa50dd7542967277d9b9
+SHA512 (IO-Socket-SSL-2.067.tar.gz) = b7b9edc470f2283c363a6296d3ce23f8754cc1b1a763329ccc8a0bc81dca7ffbaf9a833fc8ac31e62f5f72cab7c689ea0d4d0e293f75fe176d1b5c71ed723516
+Size (IO-Socket-SSL-2.067.tar.gz) = 244899 bytes