[Net-ssleay-devel] Version 1.34

[Florian Ragwitz]

On Wed, Jul 23, 2008 at 09:39:50PM +0200, Christopher Odenbach wrote:
> Mike McCauley schrieb:
> >On Wednesday 20 February 2008 16:41, Steffen Ullrich wrote:
> >>It looks like that I did not make clear that I already send the bug report
> >>to Florian Ragwitz and that he is on it.
> >>Sorry for the duplicate bug report.
> >
> >OK, well, I have checked in a fix now.
> >I hope FR is not working on it too. Florian?
> 
> And that was it since February. Is there any progress going on? Some of 
> the bugs in 1.32 are quite serious and security related (e.g. perl 
> applications which use Net::LDAP are in _NO_ way able to verify the 
> hostname of the certificate against the name they are connecting to). So 
> we are waiting for an upcoming release which contains at least these bug 
> fixes (especially around X509_get_subjectAltNames).

Thanks for the reminder. 1.34 has just been uploaded.


-- 
BOFH excuse #231:
We had to turn off that service to comply with the CDA Bill.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/net-ssleay-devel/attachments/20080724/48ed6b30/attachment.pgp