---
- branch: MAIN
  date: Wed Nov  8 21:08:48 UTC 2017
  files:
  - new: '1.86'
    old: '1.85'
    path: pkgsrc/security/p5-Net-SSLeay/Makefile
    pathrev: pkgsrc/security/p5-Net-SSLeay/Makefile@1.86
    type: modified
  - new: '1.46'
    old: '1.45'
    path: pkgsrc/security/p5-Net-SSLeay/distinfo
    pathrev: pkgsrc/security/p5-Net-SSLeay/distinfo@1.46
    type: modified
  id: 20171108T210848Z.e978b65ad493e28a38ba7776ca79d4ca2e6c80ae
  log: "p5-Net-SSLeay: update to 1.82.\n\n1.82 2017-10-31\n\tAdded support for building
    under Linuxbrew (a linuxbrew version of MacOS Homebrew)\n\tPatch from Matthew
    Altus, that implements SSL_CTX_set_psk_client_callback() and SSL_set_psk_client_callback().\n\tPatch
    to build with LibreSSL has no support for NPN\n\tAlso skip the NPN test if the
    SSL library is LibreSSL.\n\tFixed a problem with a variable declaration in ssleay_session_secret_cb_invoke
    reported by Graham Ollis.\n\tSignificant patch set from Open System Consultants:\n\t-
    Bugfix: tlsext_status_cb_invoke(...): free ocsp_response only when allocated.\n
    \t- The same callback is used on a server side for OCSP stapling and in that\n
    \ \t case ocsp_response is NULL and not used.\n\t - New feature: Added a binding
    SSL_set_session_ticket_ext_cb(ssl,callback,data)\n\t - A callback used by EAP-FAST/EAP-TEAT
    to parse and process TLS session ticket.\n\t - Tests are in t/local/65_ticket_sharing_2.t\n\t
    - New feature: Added a binding SSL_set_session_ticket_ext(ssl,ticket)\n\t - Used
    by EAP-FAST/EAP-TEAP to define TLS session ticket value.\n\t - Tests are in t/local/65_ticket_sharing_2.t\n\t
    - Bugfix: tlsext_ticket_key_cb_invoke(...): allow SHA256 HMAC key to be 32 bytes\n\t
    instead of 16 bytes (which OpenSSL will pad with zeros up to 32 bytes).\n\t -
    New feature: Added following bindings:\n\t - X509_get_ex_data(cert,idx)\n\t -
    X509_get_ex_new_index(argl,argp,new_func,dup_funL,free_func)\n\t - X509_get_app_data(cert)\n\t
    - X509_set_ex_data(cert,idx,data)\n\t - X509_set_app_data(cert,arg)\n\t - X509_STORE_CTX_get_ex_new_index(argl,argp,new_func,dup_func,free_func)\n\t
    - X509_STORE_CTX_get_app_data(x509_store_ctx)\n\t - X509_STORE_CTX_set_app_data(x509_store_ctx,arg)\n\t
    - New feature: Added an implementation for SSL_get_finished(ssl,buf,count=2*EVP_MAX_MD_SIZE)\n\t
    - Tests are in t/local/43_misc_functions.t\n\t - New feature: Added an implementation
    for SSL_get_peer_finished(ssl,buf,count=2*EVP_MAX_MD_SIZE)\n\t - Tests are in
    t/local/43_misc_functions.t\n\t - Bugfix: SSL_get_keyblock_size(s): Calculate
    key block size correctly also with AEAD ciphers\n\t which don窶å\x86² use digest
    functions.\n\t - New feature: Added a binding SSL_set_tlsext_status_ocsp_resp(ssl,staple)\n\t
    - Used by a server side to include OCSP staple in ServerHello.\n\t - Bugfix: SSL_OCSP_response_verify(ssl,rsp,svreq,flags):
    check that chain and last are not NULL\n\t before trying to use them.\n\t - Bugfix:
    inc/Module/Install/PRIVATE/Net/SSLeay.pm: Don窶å\x86² quote include and lib paths.\n"
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/security/p5-Net-SSLeay'
  unixtime: '1510175328'
  user: wiz