r25504 - in /branches/upstream/libio-socket-ssl-perl/current: Changes SSL.pm

[ansgar-guest at users.alioth.debian.org]

Author: ansgar-guest
Date: Sun Sep 21 20:39:52 2008
New Revision: 25504

URL: http://svn.debian.org/wsvn/pkg-perl/?sc=1&rev=25504
Log:
[svn-upgrade] Integrating new upstream version, libio-socket-ssl-perl (1.16)

Modified:
    branches/upstream/libio-socket-ssl-perl/current/Changes
    branches/upstream/libio-socket-ssl-perl/current/SSL.pm

Modified: branches/upstream/libio-socket-ssl-perl/current/Changes
URL: http://svn.debian.org/wsvn/pkg-perl/branches/upstream/libio-socket-ssl-perl/current/Changes?rev=25504&op=diff
==============================================================================
--- branches/upstream/libio-socket-ssl-perl/current/Changes (original)
+++ branches/upstream/libio-socket-ssl-perl/current/Changes Sun Sep 21 20:39:52 2008
@@ -1,3 +1,10 @@
+v1.16
+	- change code for SSL_check_crl to use X509_STORE_set_flags instead of
+          X509_STORE_CTX_set_flags based on bug report from 
+          <tjtoocool[AT]phreaker[DOT]net >
+        - change opened() to report -1 if the IO::Handle is open, but the
+          SSL connection failed, needed with HTTP::Daemon::SSL which will send
+          an error mssage over the unencrypted socket
 v1.15
 	- change internal behavior when SSL handshake failed (like when verify
           callback returned an error) in the hope to fix spurios errors in 

Modified: branches/upstream/libio-socket-ssl-perl/current/SSL.pm
URL: http://svn.debian.org/wsvn/pkg-perl/branches/upstream/libio-socket-ssl-perl/current/SSL.pm?rev=25504&op=diff
==============================================================================
--- branches/upstream/libio-socket-ssl-perl/current/SSL.pm (original)
+++ branches/upstream/libio-socket-ssl-perl/current/SSL.pm Sun Sep 21 20:39:52 2008
@@ -51,7 +51,7 @@
 BEGIN {
 	# Declare @ISA, $VERSION, $GLOBAL_CONTEXT_ARGS
 	@ISA = qw(IO::Socket::INET);
-	$VERSION = '1.15';
+	$VERSION = '1.16';
 	$GLOBAL_CONTEXT_ARGS = {};
 
 	#Make $DEBUG another name for $Net::SSLeay::trace
@@ -1178,7 +1178,7 @@
 
 sub opened {
 	my $self = shift;
-	return IO::Handle::opened($self) && ( ${*$self}{'_SSL_opened'} == 1 );
+	return IO::Handle::opened($self) && ${*$self}{'_SSL_opened'};
 }
 
 sub opening {
@@ -1308,7 +1308,7 @@
 
 	if ($arg_hash->{'SSL_check_crl'}) {
 		if (Net::SSLeay::OPENSSL_VERSION_NUMBER() >= 0x0090702f) {
-			Net::SSLeay::X509_STORE_CTX_set_flags(
+			Net::SSLeay::X509_STORE_set_flags(
 				Net::SSLeay::CTX_get_cert_store($ctx),
 				Net::SSLeay::X509_V_FLAG_CRL_CHECK()
 			);
@@ -1882,6 +1882,12 @@
 get to do anything. But with version 0.98 you are better comparing the global exported 
 variable $SSL_ERROR against the exported symbols SSL_WANT_READ and SSL_WANT_WRITE.
 
+=item B<opened()>
+
+This returns false if the socket could not be opened, 1 if the socket could be opened
+and the SSL handshake was successful done and -1 if the underlying IO::Handle is open,
+but the SSL handshake failed.
+
 =item B<< IO::Socket::SSL->start_SSL($socket, ... ) >>
 
 This will convert a glob reference or a socket that you provide to an IO::Socket::SSL