[SCM] Debian packaging of libio-socket-ssl-perl branch, master, updated. upstream/1.88-207-g28ccb90

Salvatore Bonaccorso carnil at debian.org
Mon May 13 20:40:48 UTC 2013


The following commit has been merged in the master branch:
commit 127cffe0e6c8735831a64ccec74383fc533c83f6
Author: Salvatore Bonaccorso <carnil at debian.org>
Date:   Mon May 13 22:03:32 2013 +0200

    Add debian/NEWS file documenting behaviour change for upstream 1.79

diff --git a/debian/NEWS b/debian/NEWS
new file mode 100644
index 0000000..47b10ef
--- /dev/null
+++ b/debian/NEWS
@@ -0,0 +1,20 @@
+libio-socket-ssl-perl (1.88-1) unstable; urgency=low
+
+  Upstream version 1.79 introduced the following change: IO::Socket::SSL will
+  complain if SSL_verify_mode is SSL_VERIFY_NONE for client unless it was
+  explicity set this way. In the future the default will change to verify the
+  server certificate and apps, which don't provide the necessary credentials
+  should fail.
+
+  The module will carp with:
+
+  *******************************************************************
+   Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
+   is deprecated! Please set SSL_verify_mode to SSL_VERIFY_PEER
+   together with SSL_ca_file|SSL_ca_path for verification.
+   If you really don't want to verify the certificate and keep the
+   connection open to Man-In-The-Middle attacks please set
+   SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.
+  *******************************************************************
+
+ -- Salvatore Bonaccorso <carnil at debian.org>  Mon, 13 May 2013 21:58:44 +0200

-- 
Debian packaging of libio-socket-ssl-perl



More information about the Pkg-perl-cvs-commits mailing list