CVS commit: [pkgsrc-2010Q3] pkgsrc/security/p5-IO-Socket-SSL

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Sun Dec 12 18:04:03 UTC 2010

Modified Files:
        pkgsrc/security/p5-IO-Socket-SSL [pkgsrc-2010Q3]: Makefile distinfo

Log Message:
Pullup ticket #3305 - requested by spz
security/p5-IO-Socket-SSL: security updated

Revisions pulled up:
- security/p5-IO-Socket-SSL/Makefile            1.53-1.54
- security/p5-IO-Socket-SSL/distinfo            1.38-1.39
---
Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Dec  2 12:25:05 UTC 2010

Modified Files:
        pkgsrc/security/p5-IO-Socket-SSL: Makefile distinfo

Log Message:
Update to 1.34:

v1.34 2010.11.01
- schema http for certificate verification changed to
  wildcards_in_cn=1, because according to rfc2818 this is valid and
  also seen in the wild
- if upgrading socket from inet to ssl fails due to handshake problems
  the socket gets downgraded, but is still open.
  See https://rt.cpan.org/Ticket/Display.html?id=61466
- deprecate kill_socket, just use close()
---
Module Name:    pkgsrc
Committed By:   gls
Date:           Tue Dec  7 20:15:01 UTC 2010

Modified Files:
        pkgsrc/security/p5-IO-Socket-SSL: Makefile distinfo

Log Message:
Update security/p5-IO-Socket-SSL to 1.35

Security fix

v1.35 2010.12.06
- if verify_mode is not VERIFY_NONE and the ca_file/ca_path cannot be
verified as valid it will no longer fall back to VERIFY_NONE but throw
an error. Thanks to Salvatore Bonaccorso and Daniel Kahn Gillmor for
pointing out the problem, see also
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606058


To generate a diff of this commit:
cvs rdiff -u -r1.52 -r1.52.2.1 pkgsrc/security/p5-IO-Socket-SSL/Makefile
cvs rdiff -u -r1.37 -r1.37.4.1 pkgsrc/security/p5-IO-Socket-SSL/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.