[SCM] Debian packaging of libio-socket-ssl-perl branch, master, updated. debian/1.93-2-9-g57156ea

Salvatore Bonaccorso carnil at debian.org
Sun Jul 7 20:43:49 UTC 2013


The following commit has been merged in the master branch:
commit 4baa5060c356774c3518aee4c4fadcf47bdac153
Author: Salvatore Bonaccorso <carnil at debian.org>
Date:   Sun Jul 7 22:37:15 2013 +0200

    Add debian/NEWS entry documenting major behaviour changes

diff --git a/debian/NEWS b/debian/NEWS
index 47b10ef..493efe6 100644
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,3 +1,20 @@
+libio-socket-ssl-perl (1.951-1) experimental; urgency=low
+
+  Upstream version 1.951 introduced the following two major behaviour changes:
+
+  * ssl_verify_mode now defaults to verify_peer for client.
+    Until now it used verify_none, but loudly complained since 1.79 about it.
+    It will not complain any longer, but the connection might probably fail.
+    Please don't simply disable ssl verification, but instead set SSL_ca_file
+    etc so that verification succeeds!
+  * it will now complain if the builtin defaults of certs/my-ca.pem or ca/
+    for CA and certs/{server,client}-{key,cert}.pem for cert and key are used,
+    e.g. no certificates are specified explicitly.
+    In the future these insecure (relative path!) defaults will be removed
+    and the CA replaced with the system defaults.
+
+ -- Salvatore Bonaccorso <carnil at debian.org>  Sun, 07 Jul 2013 22:33:29 +0200
+
 libio-socket-ssl-perl (1.88-1) unstable; urgency=low
 
   Upstream version 1.79 introduced the following change: IO::Socket::SSL will

-- 
Debian packaging of libio-socket-ssl-perl



More information about the Pkg-perl-cvs-commits mailing list