[SCM] Debian packaging of libio-socket-ssl-perl branch, master, updated. upstream/1.88-207-g28ccb90
Salvatore Bonaccorso
carnil at debian.org
Mon May 13 20:40:48 UTC 2013
The following commit has been merged in the master branch:
commit 127cffe0e6c8735831a64ccec74383fc533c83f6
Author: Salvatore Bonaccorso <carnil at debian.org>
Date: Mon May 13 22:03:32 2013 +0200
Add debian/NEWS file documenting behaviour change for upstream 1.79
diff --git a/debian/NEWS b/debian/NEWS
new file mode 100644
index 0000000..47b10ef
--- /dev/null
+++ b/debian/NEWS
@@ -0,0 +1,20 @@
+libio-socket-ssl-perl (1.88-1) unstable; urgency=low
+
+ Upstream version 1.79 introduced the following change: IO::Socket::SSL will
+ complain if SSL_verify_mode is SSL_VERIFY_NONE for client unless it was
+ explicity set this way. In the future the default will change to verify the
+ server certificate and apps, which don't provide the necessary credentials
+ should fail.
+
+ The module will carp with:
+
+ *******************************************************************
+ Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
+ is deprecated! Please set SSL_verify_mode to SSL_VERIFY_PEER
+ together with SSL_ca_file|SSL_ca_path for verification.
+ If you really don't want to verify the certificate and keep the
+ connection open to Man-In-The-Middle attacks please set
+ SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.
+ *******************************************************************
+
+ -- Salvatore Bonaccorso <carnil at debian.org> Mon, 13 May 2013 21:58:44 +0200
--
Debian packaging of libio-socket-ssl-perl
More information about the Pkg-perl-cvs-commits
mailing list