Changelog:
===========
- Resync with IANA DNS Parameters registry.
- Revise documentation for Packet.pm and Header.pm.
- Random ID cache moved from header->id to packet->encode.
- Restructure resolver method inheritance tree.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The command "bitbake universe -c fetch" currently throws a ton of warnings
as there are many 'impossible' dependencies.
In some cases these variants may never have worked and were just added by copy
and paste of recipes. In some cases they once clearly did work but became
broken somewhere along the way. Users may also be carrying local bbappend files
which add further BBCLASSEXTEND.
Having universe fetch work without warnings is desireable so clean up the broken
variants. Anyone actually needing something dropped here can propose adding it
and the correct functional dependencies back quite easily. This also then
ensures we're not carrying or fixing things nobody uses.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add missing rdep on perl-module-encode-encoding
fixes
Can't locate Encode/Encoding.pm in @INC (you may need to install the Encode::Encoding module)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
Add support for SVCB dohpath and ohttp parameters.
More robust test of bgbusy() SpamAssassin workaround.
Fix rt.cpan.org #149456
Fix rt.cpan.org #149280
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
Adopt JSON as presentation notation for EDNS options.
Zero packet->id not allowed in outbound packet.
Remove deprecated 2-argument TSIG->create() method.
Revise TSIG test scripts and documentation.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The create_spdx bbclass does not currently handle the lack of
spaces around the op (| or &). For now fix the LICENSE string.
Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The create_spdx bbclass does not currently handle the lack of
spaces around the op (| or &). For now fix the LICENSE string.
Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update:
change "the above copyright" to "the original copyright"
Changelog:
=========
Fix rt.cpan.org #137768
Test t/05-SVCB.t on Perl 5.18.0 fails with deep recursion.
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
**** 1.32 Jul 16, 2021
Text: Offer both Unicode and escaped-ASCII strings.
Add LICENSE file to comply with Fedora/RedHat announcement.
Fix rt.cpan.org #136666
Net::DNS::RR::ZoneFile parser erroneously strips line
terminators in quoted string forming part of multiline RR.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
**** 1.31 May 2, 2021
Improve implementation of SVCB record.
**** 1.30 Mar 30, 2021
Simplify parsing of multi-line RRs in zone file.
Improve robustness of "dry" resolver tests.
Avoid deep recursion in non-fatal test report.
**** 1.29 Nov 18, 2020
Include test number in summary of failed non-fatal tests.
Remove Net::DNS::SEC specific tests.
Fix faulty test plan in t/08-recurse.t.
**** 1.28 Oct 23, 2020
Eliminate indirect object syntax.
Eliminate grep/map <expression>.
**** 1.27 Sep 11, 2020
Fix rt.cpan.org #133203
Net::DNS::RR::LOC erroneously strips non default values from
string representation
Signed-off-by: Tim Orling <timothy.t.orling@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Without the autoloader module, doing a Net::SSLeay fails.
The Net::SSLeay package also does an
use AutoLoader;
Ref: https://github.com/rurban/Net-SSLeay/blob/master/lib/Net/SSLeay.pm#L26
so this is evident.
Signed-off-by: Awais Belal <awais_belal@mentor.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
$ bitbake libnet-dns-sec-perl-native
ERROR: Nothing RPROVIDES 'libcrypto-native' (but virtual:native:/path/to/meta-perl/recipes-perl/libnet/libnet-dns-sec-perl_1.10.bb RDEPENDS on or otherwise requires it)
It's a broken native recipe which means no ones need it any more, so remove it.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
$ bitbake libnet-ssleay-perl-native
ERROR: Nothing RPROVIDES 'libssl-native' (but virtual:native:/path/to/meta-perl/recipes-perl/libnet/libnet-ssleay-perl_1.85.bb RDEPENDS on or otherwise requires it)
It's a broken native recipe which means no ones need it any more, so remove it.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Add UPSTREAM_CHECK_REGEX to ignore DEV releases
* Add RDEPENDS that were missing
* Enable ptest and add RDEPENDS for tests
* Add RRECOMMENDS for libnet-dns-sec-perl
* Upstream release notes:
"""
**** 1.18 Sep 21, 2018
Documentation revised to remove ambigous use of "answer" which
has been used to refer to both the answer section of a packet
and the entire reply packet received from a nameserver.
Fix rt.cpan.org #127018
Net::DNS::ZoneFile->parse() fails if include directory specified.
Fix rt.cpan.org #127012
DNS resolution broken when options ndots used in /etc/resolv.conf
"""
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Net::DNS::SEC is installed as an extension to an existing Net::DNS
installation providing packages to support DNSSEC as specified in
RFC4033, RFC4034, RFC4035 and related documents.
It also provides support for SIG0 which is useful for dynamic updates.
Implements cryptographic signature generation and verification functions
using RSA, DSA, ECDSA, and Edwards curve algorithms.
The extended features are made available by replacing Net::DNS by
Net::DNS::SEC in the use declaration.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Fix libnet-ssleay-perl tries to execute found openssl binaries
at the place of ${OPENSSL_PREFIX} and bailing out when either
binaries are missing or can't be executed. From cross-compiling
perspective, both is insane.
Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade libnet-dns-perl from 1.14 to 1.17.
* correct LICENSE which should be MIT
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Fix RDEPENDS
* Use OPENSSL_PREFIX to pick up proper OpenSSL
* Fix mangled .so by rearranging EXTRA_CPANFLAGS
Changes:
1.84 2018-01-17
* Fixed an error in t/local/04_basic.t causing a test failure if
* Test::Exception not installed. Reported by Joel Berger.
1.83 2018-01-16
* Fixed a problem with exporting OPENSSL_NO_NEXTPROTONEG even though they are not availble
on LibreSSL
* Patch patch-SSLeay_xs-NO_NPN from Alexander Bluhm.
* Patch from Heikki Vatiainen adds support for SSL_set_default_passwd_cb* for
* OpenSSL 1.1.0f and later. LibreSSL does not support these functions, at least yet.
* Patch from Heikki Vatiainen adds new functions related to SSL_CTX_new.
* Patch from Heikki Vatiainen adds two new functions introduced in OpenSSL 1.1.0, a number
of constants and a couple of const qualifiers to SSLeay.xs. Tests and
documentation .pod were also updated.
* Patch from Heikki Vatiainen adds one new OpenSSL 1.1.0 function and has a minor fix for
* LibreSSL version detection:
- Added support for SSL_use_certificate_chain_file
function introduced in OpenSSL 1.1.0.
- Fixed LibreSSL version detection to correctly parse
* LibreSSL minor version.
* Patch from Steffen Ulrich to fix memory leaks in OCSP handling. Thanks.
* Patch from Heikki Vatiainen adds new functions for certificate verification introduced in
* OpenSSL 1.02, a number of constants, new test data files, new tests and
updates to .pod documentation.
* The new functions provide access to the built-in wildcard check
functionality available in OpenSSL 1.0.2 and later.
* The patch also adds new tests for the new functions and updates some of
the current tests for CTX_set_default_passwd_cb* functions.
* Added X509_STORE_CTX_new and X509_verify_cert.
* SSL_OCSP_response_verify now clears the error queue if OCSP_basic_verify fails but the
intermediate certificate succeeds. Patch from Stefan Ullrich.
1.82 2017-10-31
* Added support for building under Linuxbrew (a linuxbrew version of MacOS Homebrew)
* Patch from Matthew Altus, that implements SSL_CTX_set_psk_client_callback() and
SSL_set_psk_client_callback().
* Patch to build with LibreSSL has no support for NPN
* Also skip the NPN test if the SSL library is LibreSSL.
* Fixed a problem with a variable declaration in ssleay_session_secret_cb_invoke reported
by Graham Ollis.
* Significant patch set from Open System Consultants:
- Bugfix: tlsext_status_cb_invoke(...): free ocsp_response only when allocated.
- The same callback is used on a server side for OCSP stapling and in that
case ocsp_response is NULL and not used.
- New feature: Added a binding SSL_set_session_ticket_ext_cb(ssl,callback,data)
- A callback used by EAP-FAST/EAP-TEAT to parse and process TLS session ticket.
- Tests are in t/local/65_ticket_sharing_2.t
- New feature: Added a binding SSL_set_session_ticket_ext(ssl,ticket)
- Used by EAP-FAST/EAP-TEAP to define TLS session ticket value.
- Tests are in t/local/65_ticket_sharing_2.t
- Bugfix: tlsext_ticket_key_cb_invoke(...): allow SHA256 HMAC key to be 32 bytes
instead of 16 bytes (which OpenSSL will pad with zeros up to 32 bytes).
- New feature: Added following bindings:
= X509_get_ex_data(cert,idx)
= X509_get_ex_new_index(argl,argp,new_func,dup_funL,free_func)
= X509_get_app_data(cert)
= X509_set_ex_data(cert,idx,data)
= X509_set_app_data(cert,arg)
= X509_STORE_CTX_get_ex_new_index(argl,argp,new_func,dup_func,free_func)
= X509_STORE_CTX_get_app_data(x509_store_ctx)
= X509_STORE_CTX_set_app_data(x509_store_ctx,arg)
- New feature: Added an implementation for SSL_get_finished(ssl,buf,count=2*EVP_MAX_MD_SIZE)
- Tests are in t/local/43_misc_functions.t
- New feature: Added an implementation for SSL_get_peer_finished(ssl,buf,count=2*EVP_MAX_MD_SIZE)
- Tests are in t/local/43_misc_functions.t
- Bugfix: SSL_get_keyblock_size(s): Calculate key block size correctly also with AEAD ciphers
which don’t use digest functions.
- New feature: Added a binding SSL_set_tlsext_status_ocsp_resp(ssl,staple)
- Used by a server side to include OCSP staple in ServerHello.
- Bugfix: SSL_OCSP_response_verify(ssl,rsp,svreq,flags): check that chain and last are not NULL
before trying to use them.
- Bugfix: inc/Module/Install/PRIVATE/Net/SSLeay.pm: Don’t quote include and lib paths.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Fix RDEPENDS
Changes:
**** 1.14 Dec 15, 2017
Fix rt.cpan.org #123702
'use base' should not be used in packages with several
subpackages defined
Fix rt.cpan.org #123676
Net::DNS::Nameserver malformed message on big axfr
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Net-Telnet Perl module, it allows you to make client
connections to a TCP port and do network I/O, especially
to a port using the TELNET protocol.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Net::LDAP is a collection of modules that implements
a LDAP services API for Perl programs.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Add 'openssl-native' to DEPENDS to fix the following do_configure error.
*** Could not find OpenSSL
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
