MIME-Version: 1.0
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"
Date: Sun, 12 Dec 2010 18:04:03 +0000
From: "Matthias Scheler" <tron@netbsd.org>
Subject: CVS commit: [pkgsrc-2010Q3] pkgsrc/security/p5-IO-Socket-SSL
To: pkgsrc-changes@NetBSD.org
Reply-To: tron@netbsd.org
Message-Id: <20101212180403.B1183175DD@cvs.netbsd.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

Module Name:	pkgsrc
Committed By:	tron
Date:		Sun Dec 12 18:04:03 UTC 2010

Modified Files:
	pkgsrc/security/p5-IO-Socket-SSL [pkgsrc-2010Q3]: Makefile distinfo

Log Message:
Pullup ticket #3305 - requested by spz
security/p5-IO-Socket-SSL: security updated

Revisions pulled up:
- security/p5-IO-Socket-SSL/Makefile		1.53-1.54
- security/p5-IO-Socket-SSL/distinfo		1.38-1.39
---
Module Name:	pkgsrc
Committed By:	wiz
Date:		Thu Dec	 2 12:25:05 UTC 2010

Modified Files:
	pkgsrc/security/p5-IO-Socket-SSL: Makefile distinfo

Log Message:
Update to 1.34:

v1.34 2010.11.01
- schema http for certificate verification changed to
  wildcards_in_cn=1, because according to rfc2818 this is valid and
  also seen in the wild
- if upgrading socket from inet to ssl fails due to handshake problems
  the socket gets downgraded, but is still open.
  See https://rt.cpan.org/Ticket/Display.html?id=61466
- deprecate kill_socket, just use close()
---
Module Name:	pkgsrc
Committed By:	gls
Date:		Tue Dec	 7 20:15:01 UTC 2010

Modified Files:
	pkgsrc/security/p5-IO-Socket-SSL: Makefile distinfo

Log Message:
Update security/p5-IO-Socket-SSL to 1.35

Security fix

v1.35 2010.12.06
- if verify_mode is not VERIFY_NONE and the ca_file/ca_path cannot be
verified as valid it will no longer fall back to VERIFY_NONE but throw
an error. Thanks to Salvatore Bonaccorso and Daniel Kahn Gillmor for
pointing out the problem, see also
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606058


To generate a diff of this commit:
cvs rdiff -u -r1.52 -r1.52.2.1 pkgsrc/security/p5-IO-Socket-SSL/Makefile
cvs rdiff -u -r1.37 -r1.37.4.1 pkgsrc/security/p5-IO-Socket-SSL/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.