License-Update:
change "the above copyright" to "the original copyright"
Changelog:
=========
Fix rt.cpan.org #137768
Test t/05-SVCB.t on Perl 5.18.0 fails with deep recursion.
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add recipe for io-compress-lzma-perl and all the dependencies.
Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
the build system tries to deduce the compiler and its friends and fails
because OE passes LDFLAGS assuming that linker will be invoked via
compiler driver ( gcc or clang ) therefore prefixes linker options with
-Wl, but libunix-statgrab build system enquires LD variable for linker
and uses LDFLAGS with it, which causes linker to fail since ld does not
recognise -Wl, etc. Therefore using CCLD for linker is right choice here
Fixes
Checking for cc... i686-yoe-linux-ld: unrecognized option '-Wl,-O1'
i686-yoe-linux-ld: use the --help option for usage information
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0.32 changes
- Prefix internal bn2sv function so it doesn't collide with Net::SSLeay
- Ensure that verify() leaves openssl error stack clean on failure
- Fixed broken SEE ALSO links.
- prevent outer $SIG{__DIE__} handler from being called during optional require.
- omit done_testing since it does not work for older perl versions
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The main repo is sourced from git://git.openembedded.org not github.
Don't think oe-core.git exists.
Lets be constent across all sub layers.
Drop Revisions and Prioriiy from repo references as they are not used.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2.072
- add PEM_certs2file and PEM_file2certs in IO::Socket::SSL::Utils based
on idea by rovo89 in #101
- certs/*.p12 used for testing should now work with OpenSSL 3.0 too #108
- update public suffix database
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch is the result of running the latest convert-ovrrides.py
script.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
0.031 2021-07-13 22:13:48Z
- remove unneeded develop prereqs that caused metacpan to unduly
raise the river position of some dependent modules
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
**** 1.32 Jul 16, 2021
Text: Offer both Unicode and escaped-ASCII strings.
Add LICENSE file to comply with Fedora/RedHat announcement.
Fix rt.cpan.org #136666
Net::DNS::RR::ZoneFile parser erroneously strips line
terminators in quoted string forming part of multiline RR.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
logcheck (1.3.23) unstable; urgency=medium
* v.i.d/logcheck-sudo: adjust 'session opened' rule to match uid, thanks to
Marco d'Itri for the patch (closes: #985166)
* v.i.d/logcheck-su: allow 'none' as pseudo terminal, thanks to Marco d'Itri
for the patch
-- Hannes von Haugwitz <hannes@vonhaugwitz.com> Thu, 01 Apr 2021 21:19:39 +0200
logcheck (1.3.22) unstable; urgency=medium
* d/t/01-logcheck: use temporary log file
-- Hannes von Haugwitz <hannes@vonhaugwitz.com> Mon, 01 Feb 2021 22:28:20 +0100
logcheck (1.3.21) unstable; urgency=medium
[ Debian Janitor ]
* Set debhelper-compat version in Build-Depends.
* Fix day-of-week for changelog entries 1.2.23, 1.2.17, 1.1.1-7.3, 1.1.1-7.
* Update standards version to 4.4.1, no changes needed.
[ Simó Albert i Beltran ]
* ignore.d.server/ssh:
- match port
- match more variants of 'Disconnected from' message
- match 'Connection reset' message
[ Ville Salomäki ]
* v.i.d/logcheck-su, v.i.d/logcheck-sudo: allow '.' and '_' in usernames
[Lee Maguire]
* src/logcheck: support systemd journal as log source (closes: #876420)
[ Hannes von Haugwitz ]
* Switch to debhelper 13
* Update standards version to 4.5.1, no changes needed.
* Update debian/copyright
* Set Rules-Requires-Root to no
* Add autopkgtest
* Adjust rules for PAM open session messages to match new format
* Update 'su' rules to match changed format (closes: #931770)
* i.d.s/dnsmasq: allow '.' in interface names, thanks to Craig Small for the
patch (closes: #732655)
* i.d.s/openvpn: match 'VERIFY X509NAME OK' message (closes: #751292)
* i.d.s/spamd:
- match autolearn_force field
- properly match IPv6 addresses
thanks to Craig Small for the patch (closes: #755374)
* i.d.s/postfix: match sasl_sender field (closes: #700851)
* i.d.s/su, v.i.d/logcheck-su:
- match 'su-l:session'
- match '(to <substitute-user>) <user>' message
* i.d.s/systemd-logind: new
- match logind session messages
* i.d.s/systemd: match some Succeeded/Finished messages
* i.d.s/dhclient: adjust 'DHCPREQUEST' rule
-- Hannes von Haugwitz <hannes@vonhaugwitz.com> Sun, 31 Jan 2021 23:01:29 +0100
Signed-off-by: Tim Orling <timothy.t.orling@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0.030 2020-03-21 16:56:30Z
- fix tests that can fail when there is already an installed module
named Foo::Bar::Baz (RT#132140)
0.029 2020-03-14 05:27:59Z
- new :report_warnings feature, for printing all of the (unexpected)
warning content when had_no_warnings() is called (Tina Mueller, PR#10)
Signed-off-by: Tim Orling <timothy.t.orling@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
**** 1.31 May 2, 2021
Improve implementation of SVCB record.
**** 1.30 Mar 30, 2021
Simplify parsing of multi-line RRs in zone file.
Improve robustness of "dry" resolver tests.
Avoid deep recursion in non-fatal test report.
**** 1.29 Nov 18, 2020
Include test number in summary of failed non-fatal tests.
Remove Net::DNS::SEC specific tests.
Fix faulty test plan in t/08-recurse.t.
**** 1.28 Oct 23, 2020
Eliminate indirect object syntax.
Eliminate grep/map <expression>.
**** 1.27 Sep 11, 2020
Fix rt.cpan.org #133203
Net::DNS::RR::LOC erroneously strips non default values from
string representation
Signed-off-by: Tim Orling <timothy.t.orling@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2.005004 - 2021-03-29
- fix file set in %INC in create_class_with_roles (RT#134845)
2.005003 - 2021-03-21
- silence 'once' warnings from Moo::_Utils
2.005_002 - 2021-01-22
- fix C3 test skipping properly when MRO::Compat not available on perl < 5.10
2.005_001 - 2021-01-20
- fix perl version check in global destruction code
2.005_000 - 2021-01-20
- remove MooseX::Types from developer prereqs
- recommend Sub::Util rather than Sub::Name, since Sub::Util is in core
- fix line numbers when using oo module (perl -Moo)
- adjust some author tests to rely less on external modules
- lower Exporter prereq to any version
- bump Role::Tiny prereq to 2.003004
- refactor and simplify role application code, as allowed by new Role::Tiny
version
- switch to using normal strict+warnings rather than strictures for authors
- remove strictures from recommends, as Moo does not use it anywhere
- remove Task::Weaken prereq, as it served no purpose
- remove MRO::Compat prereq, using it only when user code does
- remove use of Devel::GlobalDestruction in code, only using
Devel::GlobalDestruction::XS when it is available. Devel::GlobalDestruction
is still a dependency on perl < 5.14 to facilitate the installation of the
::XS module.
- Moo now has no mandatory perl version specific dependencies. The version
specific modules are now optional or not used. This means code using Moo can
be fatpacked on a new perl version without special cases, and it will work
on older perl versions.
2.004004 - 2020-11-25
- fix error location test when using core Carp on perl 5.8.9 - 5.10.1
2.004003 - 2020-11-21
- fix extraneous MANIFEST entry
2.004002 - 2020-11-20
- no changes
- releasing as stable
2.004_001 - 2020-07-30
- remove Module::Runtime prerequisite
- internal code cleanups
- added test for conflicts in extensions wrapping 'has' and similar subs
Signed-off-by: Tim Orling <timothy.t.orling@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2.071 2021/05/23
- fix t/nonblock.t race on some systems. Fixes issue #102, maybe #98 too.
2.070 2021/02/26
- changed bugtracker in Makefile.PL to github, away from obsolete rt.cpan.org
2.069 2021/01/22
- IO::Socket::Utils CERT_asHash and CERT_create now support subject and issuer
with multiple same parts (like multiple OU). In this case an array ref instead
of a scalar is used as hash value.
References:
https://github.com/noxxi/p5-io-socket-ssl/issues/102https://github.com/noxxi/p5-io-socket-ssl/issues/98https://github.com/noxxi/p5-io-socket-ssl/issues/95
Signed-off-by: Tim Orling <timothy.t.orling@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0.23 2021-05-31
- added CI - thanks @zmughal
- now recognises MacOS clang - thanks @xenu
0.22 2021-05-29
- Add C++ standard support flag detection - thanks @zmughal!
See <https://github.com/tsee/extutils-cppguess/pull/24>.
Signed-off-by: Tim Orling <timothy.t.orling@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Without the autoloader module, doing a Net::SSLeay fails.
The Net::SSLeay package also does an
use AutoLoader;
Ref: https://github.com/rurban/Net-SSLeay/blob/master/lib/Net/SSLeay.pm#L26
so this is evident.
Signed-off-by: Awais Belal <awais_belal@mentor.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
latest perl has made it defualt to remove current directory from default
include paths but some modules still depend on this behavior, so let
them use it
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The licenses were renamed to match their SPDX names, fix the
references in LIC_FILES_CHKSUM
Correct the checksums where they were wrong
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2.002004 - 2021-01-24
- restore requiring base class when using create_class_with_roles, which was
accidentally lost in 2.002_000 (RT#134075)
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Hexdump can come from busybox or util-linux, therefore its better to
define it via u-a so it can live along with these packages
Signed-off-by: Khem Raj <raj.khem@gmail.com>
These perl modules use cpan class, which adds build time dependency on
perl, and since perl is arch specific this ends up with sstate signature
differences for do_configure when arch is changed, therefore these
packages needs to be made part of arch package-arch
Fixes
ERROR: libconfig-autoconf-perl different signature for task do_configure.sigdata between qemux86copy and qemuarm
NOTE: Starting bitbake server...
NOTE: Started PRServer with DBfile: /home/jenkins/oe/world/yoe/cache/prserv.sqlite3, IP: 127.0.0.1, PORT: 43053, PID: 16399
Hash for dependent task libconfig/libconfig-autoconf-perl_0.318.bb:do_prepare_recipe_sysroot changed from 66cd7f8d93afb36b314a0604e94f72151cb18410f395bc949156188a764ad68c to d9752dd39f67802473ebfe048ca1a688d684c7c31483e648c4e43bde9b16e3b5
Unable to find matching sigdata for /home/jenkins/oe/world/yoe/sources/meta-openembedded/meta-perl/recipes-perl/libconfig/libconfig-autoconf-perl_0.318.bb:do_prepare_recipe_sysroot with hashes 66cd7f8d93afb36b314a0604e94f72151cb18410f395bc949156188a764ad68c or d9752dd39f67802473ebfe048ca1a688d684c7c31483e648c4e43bde9b16e3b5
ERROR: libfile-slurper-perl different signature for task do_configure.sigdata between qemux86copy and qemuarm
NOTE: Starting bitbake server...
NOTE: Started PRServer with DBfile: /home/jenkins/oe/world/yoe/cache/prserv.sqlite3, IP: 127.0.0.1, PORT: 39201, PID: 16448
Hash for dependent task libfile/libfile-slurper-perl_0.012.bb:do_prepare_recipe_sysroot changed from d6fd4eb704e706ed44daf37099d47fd188f6ac8c212c779dbfa7e40cff7bf449 to 9f0c17d2bf8389c634c143cc908e81f85b4d4bdab245199c86d4ae4480856d0d
Unable to find matching sigdata for /home/jenkins/oe/world/yoe/sources/meta-openembedded/meta-perl/recipes-perl/libfile/libfile-slurper-perl_0.012.bb:do_prepare_recipe_sysroot with hashes d6fd4eb704e706ed44daf37099d47fd188f6ac8c212c779dbfa7e40cff7bf449 or 9f0c17d2bf8389c634c143cc908e81f85b4d4bdab245199c86d4ae4480856d0d
ERROR: libtest-warnings-perl different signature for task do_configure.sigdata between qemux86copy and qemuarm
NOTE: Starting bitbake server...
NOTE: Started PRServer with DBfile: /home/jenkins/oe/world/yoe/cache/prserv.sqlite3, IP: 127.0.0.1, PORT: 43651, PID: 16479
Hash for dependent task libtest/libtest-warnings-perl_0.028.bb:do_prepare_recipe_sysroot changed from 77d070ada82799a51cce33ae63f70dafb2c20111e0dca15afc041efea22f1cd4 to 3d0bd29b23c66f14d4041153683eaa3d4ee0098e2b023747801748eb49da6300
Unable to find matching sigdata for /home/jenkins/oe/world/yoe/sources/meta-openembedded/meta-perl/recipes-perl/libtest/libtest-warnings-perl_0.028.bb:do_prepare_recipe_sysroot with hashes 77d070ada82799a51cce33ae63f70dafb2c20111e0dca15afc041efea22f1cd4 or 3d0bd29b23c66f14d4041153683eaa3d4ee0098e2b023747801748eb49da6300
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Jens Rehsack <sno@netbsd.org>
There is no libcrypt-openssl-guess package, but there is a
libcrypt-openssl-guess-perl.
Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Shell nologin whether provided by shadow or util-linux is installed to
/sbin/nologin in oe-core. But the default shell of adduser is
/usr/sbin/nologin and will fail to create a new user.
Set the default shell with /sbin/nologin to fix the issue.
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add recipe for Unix::Statgrab perl module, a sane language binding for
libstatgrab.
Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Introduce Config::Autoconf module to meta-perl which will allow some
probes can be run without leaving perl5 context.
Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Since File::Slurp is broken since ages and File::Slurp::Tiny discouraged
for some years, newer perl5 module distributions often rely on File::Slurper.
Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add recipe for Test::Warnings modulem widely used by Kwalitee tests
is modern perl5 module distributions.
Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
-License-Update: Only changed the location of the license in the file.
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
I have no idea if this is the right thing to do, but without the patch I
can't actually buil OE because none of these layers are compatible
with the change in openembedded-core to move to zeus.
Fixes: a5c9709b8d ("layer.conf: Update for zeus series") # openembedded-core
Signed-off-by: Palmer Dabbelt <palmer@dabbelt.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
$ bitbake libnet-dns-sec-perl-native
ERROR: Nothing RPROVIDES 'libcrypto-native' (but virtual:native:/path/to/meta-perl/recipes-perl/libnet/libnet-dns-sec-perl_1.10.bb RDEPENDS on or otherwise requires it)
It's a broken native recipe which means no ones need it any more, so remove it.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
$ bitbake libnet-ssleay-perl-native
ERROR: Nothing RPROVIDES 'libssl-native' (but virtual:native:/path/to/meta-perl/recipes-perl/libnet/libnet-ssleay-perl_1.85.bb RDEPENDS on or otherwise requires it)
It's a broken native recipe which means no ones need it any more, so remove it.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Use += so it can use the RDEPS from cpan-base class
Fixes:
ERROR: QA Issue: /usr/bin/mime-construct contained in package mime-construct requires /usr/bin/perl, but no providers found in RDEPENDS_mime-construct? [file-rdeps]
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Update HOMEPAGE
* Use CPAN_MIRROR in SRC_URI
* Add to RDEPENDS, not overwrite
* Add runtime and ptest dependencies
* Add RPROVIDES
License-Update: update copyright year; only use lines which apply to license and copyright
Upstream release notes:
019.001 Sat Dec 29
! Makefile.PL
- GH PR#4: Added timeout to wget call in Makefile.PL by J. Bargsten.
- CPAN RT#125079: Installation stuck after a wget.
Fixed by changing scheme from ftp to https.
! lib/Text/LineFold.pm
! t/04fold.t
- Fix: Text::LineFold: new() & config() did not allow multiple Prep option
! t/01break.t
! t/02hangul.t
! t/03ns.t
! t/04fold.t
! t/05urgent.t
! t/06context.t
! t/07sea.t
! t/08partial.t
! t/09uri.t
! t/11format.t
! t/12fold2.t
! t/13flowedsp.t
! t/14sea_al.t
! t/15array.t
! t/16regex.t
! t/17prop.t
! t/18currency.t
- CPAN RT #120535: Fails tests when no "." in @INC.
2018.012 Sat Dec 29 2018
2018.003 Thu Mar 29 2018
! Makefile.PL.sombok
- CPAN RT#120370: Build fails with recent EUMM and some make variants.
Patch by Alexandr Ciornii.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
ptest dependency for libcgi-perl
NAME
Test::Warn - Perl extension to test methods for warnings
DESCRIPTION
A good style of Perl programming calls for a lot of diverse regression tests.
This module provides a few convenience methods for testing warning based-code.
If you are not already familiar with the Test::More manpage now would be the time to go take a look.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Dependency for Test::Warn
NAME
Sub::Uplevel - apparently run a function in a higher stack frame
DESCRIPTION
Like Tcl's uplevel() function, but not quite so dangerous. The idea is
just to fool caller(). All the really naughty bits of Tcl's uplevel()
are avoided.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Add ptest dependencies`
* Reorganize recipe according to best practices
* Use CPAN_MIRROR
* Update HOMEPAGE
Upstream release notes:
1.62 2018-12-29
- Switched to a production version
1.61_04 2018-12-22
- Added sqlite_db_config method and new constants for it
- Added sqlite_defensive option to disallow dangerous SQLite features
- Exposed some of the hidden extended result codes
1.61_03 2018-12-19
- Upgraded SQLite to 3.26.0, which reportedly has a security fix
1.61_02 2018-12-01
- Added sqlite_backup_from_dbh/sqlite_backup_to_dbh methods
- Introduced sqlite_prefer_numeric_type database handle attribute
that changes the value of TYPE statement handle attribute
from an array of string to an array of integer, as an experimental
feature. Setting this may break your applications.
- Changed preferred bugtracker
1.61_01 2018-12-01
- Added ability to configure SQLITE_MAX_LENGT with environmental
variable (Roy Storey)
- Added sqlite_limit database handle method to change run-time limits
- Upgraded SQLite to 3.25.3
- Updated constants
1.60 2018-12-01
- Switched to a production version
1.59_03 2018-11-03
- Added a note on the long standing bug on TYPE statement
handle attribute
- Applied a doc patch on Virtual::PerlData by Björn Höhrmann
(GH-31)
1.59_02 2018-09-30
- Upgraded SQLite to 3.25.2
1.59_01 2018-09-17
- Upgraded SQLite to 3.25.0, with ALTER TABLE ... RENAME COLUMN
and UPSERT among others
- Added ::GetInfo (GH#32, Brendan Byrd)
- Fix to use a PV value as a virtual table column value
where appropriate (RT-124941)
- Add deferrability to foreign_key_info (mohawk2)
1.58 2018-03-28
- Switched to a production version.
1.57_01 2018-03-21
- Made it an error to fetch attributes from a statement
handle whose database handle is inactive (ribasushi++)
1.56 2018-02-28
- Switched to a production version.
1.55_07 2018-01-27
- This is a developer release to help testing DBIx::Class
- Upgraded SQLite to 3.22.0
- Disabled two STAT compile time options (tentatively),
which fixes RT-124227 anyway
1.55_06 2018-01-27
- This is a developer release to help testing DBIx::Class
- Downgraded SQLite to 3.19.3 because of a SQLite regression
(RT-124227, ribasushi++)
- Fixed some tests to adapt to a change in error format
introduced by the latest DBI
- Remove no warnings test from t/43_fts.t which failed under
some environments
1.55_05 2017-12-16
- Implemented ParamValues statement handle attribute (RT-123886)
1.55_04 2017-11-22
- Updated SQLite to 3.21.0
- Resolved#122581: statistics_info() doesn't work correctly
(John Deighan)
- Fixed typo (GH#26, ReneNyffenegger)
- Silenced some warnings (GH#25, Jacques Germishuys)
- Fixed no dot in @INC issue (GH#24, ribasushi)
- Fixed zero-length BLOB value is retrieved as undef
(GH#23, SATO Kentaro)
- Fixed VirtualTable::PerlData to use new ops added in SQLite 3.21.0
(GH#28, fschlich)
- noted on sqlite_extended_result_codes handle attribute
1.55_03 2017-02-14
- Updated SQLite to 3.17.0
1.55_02 2017-01-08
- Updated SQLite to 3.16.2
- Fixed statistics_info when only unique indexes were requested (Dave
Rolsky++). GitHub #21
1.55_01 2017-01-04
- Updated SQLite to 3.16.0
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Ensures that no warnings are emitted during tests
* ptest dependency for libdbd-sqlite-perl
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Since commit [d7ea637 recipes-devtools: Move back from
meta-networking to meta-perl] applied, but freeradius
locates in meta-networking
If meta-networking not present and ptest enable, skip it
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libmodule-build-perl is a dependency for cpan_build.bbclass
and as such has been moved to oe-core
OE-Core rev: 81ba07d85d21456bf7248b2f04082958e8d724c2
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
It needs both freeradius and perl-module-data-dumper,
so neither place would fulfill all dependencies.
In general meta-perl looks like the more appropriate place.
The location in meta-networking also had the problem that
it was one directory too deep and therefore not included
in BBFILES.
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sort RDEPENDS in alpha order
* add missing dependencies (since perl-sanity change)
Upstream release notes:
[Fixed]
- Appends PID to random file names for tee signalling to avoid
random name collision when used in multiple forked children.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add runtime and ptest dependencies.
Upstream release notes:
2.000006 - 2019-03-10
- update internal list of warnings for categories added in blead (v5.29.9)
- fix extras test to avoid any files in the temp directory's parent
directories interfering (RT#128751)
2.000005 - 2018-04-20
- update internal list of warnings for categories added in 5.28.0 (no
behaviour change)
2.000004 - 2018-04-19
- update bundled ExtUtils::HasCompiler to 0.021
- update internal list of warnings for categories added in 5.26.0 (no
behavior change)
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This module contains data tables useful in dealing with HTML.
It provides no functions or methods.
This is a dependency for libhtml-paser-perl.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Add runtime and ptest dependencies
Upstream release notes:
0.31 Mon Sep 24 2018
- Remove default of SHA256 for RSA keys. This has caused significant
problems with downstream modules and it has always been possible to
do $key->use_sha256_hash()
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
We follow Debian naming and this module snuck in misnamed.
Add PROVIDES "libcrypt-openssl-guess" for backwards compatibility.
Add runtime and ptest dependencies.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Test::Deep gives you very flexible ways to check that the result you got is
the result you were expecting. At its simplest it compares two structures
by going through each level, ensuring that the values match, that arrays and
hashes have the same elements and that references are blessed into the
correct class. It also handles circular data structures without getting
caught in an infinite loop.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update libio-socket-ssl-perl from 2.060 to 2.066.
* update line number of license in META.yml
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update SRC_URI for adduser as the previous
one is invalid.
Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Add UPSTREAM_CHECK_REGEX to ignore DEV releases
* Add RDEPENDS that were missing
* Enable ptest and add RDEPENDS for tests
* Add RRECOMMENDS for libnet-dns-sec-perl
* Upstream release notes:
"""
**** 1.18 Sep 21, 2018
Documentation revised to remove ambigous use of "answer" which
has been used to refer to both the answer section of a packet
and the entire reply packet received from a nameserver.
Fix rt.cpan.org #127018
Net::DNS::ZoneFile->parse() fails if include directory specified.
Fix rt.cpan.org #127012
DNS resolution broken when options ndots used in /etc/resolv.conf
"""
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Net::DNS::SEC is installed as an extension to an existing Net::DNS
installation providing packages to support DNSSEC as specified in
RFC4033, RFC4034, RFC4035 and related documents.
It also provides support for SIG0 which is useful for dynamic updates.
Implements cryptographic signature generation and verification functions
using RSA, DSA, ECDSA, and Edwards curve algorithms.
The extended features are made available by replacing Net::DNS by
Net::DNS::SEC in the use declaration.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Fix libnet-ssleay-perl tries to execute found openssl binaries
at the place of ${OPENSSL_PREFIX} and bailing out when either
binaries are missing or can't be executed. From cross-compiling
perspective, both is insane.
Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update recipe for CPAN hosted Perl5 module Crypt::OpenSSL::RSA
from 0.28 to 0.30 to fix build issues when using openssl 1.1 and
to express our love to the Perl Programming Language.
LICENSE checksum updated because of:
f0a2ed2 Purge trailing whitespace
Changes since 0.28: https://metacpan.org/changes/release/TODDR/Crypt-OpenSSL-RSA-0.30
Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add recipe for CPAN hosted Perl5 module Crypt::OpenSSL::Guess
version 0.11 as prerequisite for libcrypt-openssl-rsa-perl update
to express our love for the Perl Programming Language.
Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade logcheck from 1.3.18 to 1.3.19.
* update SRC_URI to replace git repo with tarball that saves some space
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade libnet-dns-perl from 1.14 to 1.17.
* correct LICENSE which should be MIT
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upgrade adduser from 3.116 to 3.117.
* remove redefine of S
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The https://anonscm.debian.org and https://alioth.debian.org service have been
discontinued. They are replaced by salsa.debian.org.
Signed-off-by: Liu Haitao <haitao.liu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Remove tests which require "-T" (taint) command line option
* Remove tests which are inappropriate for on-target testing
* Install "prove" to /usr/local/bin to avoid conflict with perl-misc
Upstream release notes:
3.42 19-03-2018
- Enable rulesfile.t to run in core
3.41 27-02-2018
- Released 3.40_01 without code modifications
3.40_01 23-07-2017
- Return handle for pipes and sockets #58 (Erik Huelsmann)
- TAP v13 plan allows trailing whitespace (Steffen Schwigon)
- prove: add a --statefile=<path> option to customize the .prove file
(Ævar Arnfjörð Bjarmason)
- Avoid non-deterministic source handling, make a SourceHandler tie an
error. (Michael Schwern, Leon Timmermans)
- Fix and simplify MSWin32 colorization (Roy Ivy III)
- Fix file source handler to accept single extensions option (Tomoki Aonuma)
- Spelling fixes (Brian Wightman)
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Upstream has fixed build system to use EUMM, so we no
longer need the fix on github.com/moto-timo.
Add UPSTREAM_CHECK_REGEX to ensure we catch future updates.
Extended the license checksum to include the Copyright.
The length of the README file has changed, so the checksum
has changed. Verified that the license remains the same.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Upstream has updated the build system to use EUMM, so the fix on
github.com/moto-timo is no longer needed.
Because the versions where out of sync, reflect the bump in PR.
Add UPSTREAM_CHECK_REGEX to properly catch upstream updates.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Changes:
2.054 2018/01/22
- added missing test certificates to MANIFEST
2.053 2018/01/21
- small behavior fixes
- if SSL_fingerprint is used and matches don't check for OCSP
- Utils::CERT_create - small fixes to properly specific purpose, ability to
use predefined complex purpose but disable some features
- update PublicSuffix
- updates for documentation, especially regarding pitfalls with forking or using
non-blocking sockets. Spelling fixes.
- test fixes and improvements
- stability improvements for live tests
- regenerate certificate in certs/ and make sure they are limited to the
correct purpose. Checkin program used to generate certificates.
- adjust tests since certificates have changed and some tests used
certificates intended for client authentication as server certificates,
which now no longer works
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Fix RDEPENDS
Changes:
2.0132 2017-10-28
- Revert setNamespace() enhancements that broke some dependent tests:
- commit df9fdc6659cb2e4e9bc896e58c02dfd79b430fbb
- add t/48_rt123379_setNamespace.t .
- Thanks to Alexander Bluhm and Slaven Rezic for the reports and
the test.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Fix RDEPENDS
* Add note that perl-module-test-harness should be preferred
unless a newer version is needed than provided by perl
Changes:
3.39 06-04-2017
- Make tests pass when PERL_USE_UNSAFE_INC=0
3.38 13-03-2017
- Released 3.37_01 without changes
3.37_01
- Set PERL_USE_UNSAFE_INC when running tests using Test::Harness (Leon Timmermans)
- Avoid loading optional modules from . in prove
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Changes:
2.000006 - 2017-11-08
- account for code references stored directly in stash (for perl 5.28)
- work around hint leakage when loading modules in perl 5.8 and 5.10.1
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Fix RDEPENDS
* Use OPENSSL_PREFIX to pick up proper OpenSSL
* Fix mangled .so by rearranging EXTRA_CPANFLAGS
Changes:
1.84 2018-01-17
* Fixed an error in t/local/04_basic.t causing a test failure if
* Test::Exception not installed. Reported by Joel Berger.
1.83 2018-01-16
* Fixed a problem with exporting OPENSSL_NO_NEXTPROTONEG even though they are not availble
on LibreSSL
* Patch patch-SSLeay_xs-NO_NPN from Alexander Bluhm.
* Patch from Heikki Vatiainen adds support for SSL_set_default_passwd_cb* for
* OpenSSL 1.1.0f and later. LibreSSL does not support these functions, at least yet.
* Patch from Heikki Vatiainen adds new functions related to SSL_CTX_new.
* Patch from Heikki Vatiainen adds two new functions introduced in OpenSSL 1.1.0, a number
of constants and a couple of const qualifiers to SSLeay.xs. Tests and
documentation .pod were also updated.
* Patch from Heikki Vatiainen adds one new OpenSSL 1.1.0 function and has a minor fix for
* LibreSSL version detection:
- Added support for SSL_use_certificate_chain_file
function introduced in OpenSSL 1.1.0.
- Fixed LibreSSL version detection to correctly parse
* LibreSSL minor version.
* Patch from Steffen Ulrich to fix memory leaks in OCSP handling. Thanks.
* Patch from Heikki Vatiainen adds new functions for certificate verification introduced in
* OpenSSL 1.02, a number of constants, new test data files, new tests and
updates to .pod documentation.
* The new functions provide access to the built-in wildcard check
functionality available in OpenSSL 1.0.2 and later.
* The patch also adds new tests for the new functions and updates some of
the current tests for CTX_set_default_passwd_cb* functions.
* Added X509_STORE_CTX_new and X509_verify_cert.
* SSL_OCSP_response_verify now clears the error queue if OCSP_basic_verify fails but the
intermediate certificate succeeds. Patch from Stefan Ullrich.
1.82 2017-10-31
* Added support for building under Linuxbrew (a linuxbrew version of MacOS Homebrew)
* Patch from Matthew Altus, that implements SSL_CTX_set_psk_client_callback() and
SSL_set_psk_client_callback().
* Patch to build with LibreSSL has no support for NPN
* Also skip the NPN test if the SSL library is LibreSSL.
* Fixed a problem with a variable declaration in ssleay_session_secret_cb_invoke reported
by Graham Ollis.
* Significant patch set from Open System Consultants:
- Bugfix: tlsext_status_cb_invoke(...): free ocsp_response only when allocated.
- The same callback is used on a server side for OCSP stapling and in that
case ocsp_response is NULL and not used.
- New feature: Added a binding SSL_set_session_ticket_ext_cb(ssl,callback,data)
- A callback used by EAP-FAST/EAP-TEAT to parse and process TLS session ticket.
- Tests are in t/local/65_ticket_sharing_2.t
- New feature: Added a binding SSL_set_session_ticket_ext(ssl,ticket)
- Used by EAP-FAST/EAP-TEAP to define TLS session ticket value.
- Tests are in t/local/65_ticket_sharing_2.t
- Bugfix: tlsext_ticket_key_cb_invoke(...): allow SHA256 HMAC key to be 32 bytes
instead of 16 bytes (which OpenSSL will pad with zeros up to 32 bytes).
- New feature: Added following bindings:
= X509_get_ex_data(cert,idx)
= X509_get_ex_new_index(argl,argp,new_func,dup_funL,free_func)
= X509_get_app_data(cert)
= X509_set_ex_data(cert,idx,data)
= X509_set_app_data(cert,arg)
= X509_STORE_CTX_get_ex_new_index(argl,argp,new_func,dup_func,free_func)
= X509_STORE_CTX_get_app_data(x509_store_ctx)
= X509_STORE_CTX_set_app_data(x509_store_ctx,arg)
- New feature: Added an implementation for SSL_get_finished(ssl,buf,count=2*EVP_MAX_MD_SIZE)
- Tests are in t/local/43_misc_functions.t
- New feature: Added an implementation for SSL_get_peer_finished(ssl,buf,count=2*EVP_MAX_MD_SIZE)
- Tests are in t/local/43_misc_functions.t
- Bugfix: SSL_get_keyblock_size(s): Calculate key block size correctly also with AEAD ciphers
which don’t use digest functions.
- New feature: Added a binding SSL_set_tlsext_status_ocsp_resp(ssl,staple)
- Used by a server side to include OCSP staple in ServerHello.
- Bugfix: SSL_OCSP_response_verify(ssl,rsp,svreq,flags): check that chain and last are not NULL
before trying to use them.
- Bugfix: inc/Module/Install/PRIVATE/Net/SSLeay.pm: Don’t quote include and lib paths.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Fix RDEPENDS
Changes:
**** 1.14 Dec 15, 2017
Fix rt.cpan.org #123702
'use base' should not be used in packages with several
subpackages defined
Fix rt.cpan.org #123676
Net::DNS::Nameserver malformed message on big axfr
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Changes:
2.003004 - 2017-12-01
- re-allow stubs for attribute parameters like isa or coerce (RT#123753)
- fix accidentally removed space in coderef error message (GH#33)
- fix test errors with old Carp versions
2.003003 - 2017-11-16
- test tweaks
- fix handling of code refs stored directly in the stash (for perl 5.28)
- consider inline packages with constants in them as being loaded
- stubs will be treated as methods that exist when inflating to Moose
- avoid loading overload.pm unless required
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Changes:
version 2.14: Wed 8 Nov 17:45:22 CET 2017
Fixes:
- MojoX should not die on missing types.
rt.cpan.org#123298 [Dmitry Latin]
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Fix RDEPENDS
Changes:
2.052 2017/10/22
- disable NPN support if LibreSSL>=2.6.1 is detected since they've replaced the
functions with dummies instead of removing NPN completly or setting
OPENSSL_NO_NEXTPROTONEG
- t/01loadmodule.t shows more output helpful in debugging problems
- update fingerprints for extenal tests
- update documentation to make behavior of syswrite more clear
2.051 2017/09/05
- syswrite: if SSL_write sets SSL_ERROR_SYSCALL but no $! (as seen with
OpenSSL 1.1.0 on Windows) set $! to EPIPE to propagate a useful error up
https://github.com/noxxi/p5-io-socket-ssl/issues/62
2.050 2017/08/18
- removed unecessary settings of SSL_version and SSL_cipher_list from tests
- protocol_version.t can now deal when TLS 1.0 and/or TLS 1.1 are not supported
as is the case with openssl versions in latest Debian (buster)
2.049 2017/06/12
- fixed problem caused by typo in the context of session cache
https://github.com/noxxi/p5-io-socket-ssl/issues/60
- update PublicSuffix information from publicsuffix.org
2.048 2017/04/16
- fixed small memory leaks during destruction of socket and context, RT#120643
2.047 2017/02/16
- better fix for problem which 2.046 tried to fix but broke LWP this way
2.046 2017/02/15
- cleanup everything in DESTROY and make sure to start with a fresh %{*self}
in configure_SSL because it can happen that a GLOB gets used again without
calling DESTROY (https://github.com/noxxi/p5-io-socket-ssl/issues/56)
2.045 2017/02/13
- fixed memory leak caused by not destroying CREATED_IN_THIS_THREAD for SSL
objects -> github pull#55
- optimization: don't track SSL objects and CTX in *CREATED_IN_THIS_THREAD
if perl is compiled w/o thread support
- small fix in t/protocol_version.t to use older versions of Net::SSLeay
with openssl build w/o SSLv3 support
- when setting SSL_keepSocketOnError to true the socket will not be closed
on fatal error. This is a modified version of
https://github.com/noxxi/p5-io-socket-ssl/pull/53/
2.044 2017/01/26
- protect various 'eval'-based capability detections at startup with a localized
__DIE__ handler. This way dynamically requiring IO::Socket::SSL as done by
various third party software should cause less problems even if there is a
global __DIE__ handler which does not properly deal with 'eval'.
2.043 2017/01/06
- make t/session_ticket.t work with OpenSSL 1.1.0. With this version the
session does not get reused any longer if it was not properly closed which
is now done using an explicit close by the client which causes a
proper SSL_shutdown
2.042 2017/01/05
- enable session ticket callback with Net::SSLeay>=1.80
2.041 2017/01/04
- leave session ticket callback off for now until the needed patch is
included in Net::SSLeay. See
https://rt.cpan.org/Ticket/Display.html?id=116118#txn-1696146
2.040 2016/12/17
- fix detection of default CA path for OpenSSL 1.1.x
- Utils::CERT_asHash now includes the signature algorithm used
- Utils::CERT_asHash can now deal with large serial numbers
2.039 2016/11/20
- OpenSSL 1.1.0c changed the behavior of SSL_read so that it now returns -1 on
EOF without proper SSL shutdown. Since it looks like that this behavior will
be kept at least for 1.1.1+ adapt to the changed API by treating errno=NOERR
on SSL_ERROR_SYSCALL as EOF.
2.038 2016/09/17
- restrict session ticket callback to Net::SSLeay 1.79+ since version before
contains bug. Add test for session reuse
- extend SSL fingerprint to pubkey digest, i.e. 'sha1$pub$xxxxxx....'
- fix t/external/ocsp.t to use different server (under my control) to check
OCSP stapling
2.037 2016/08/22
- fix session cache del_session: it freed the session but did not properly
remove it from the cache. Further reuse causes crash.
2.036 2016/08/11
- disable OCSP support when Net::SSLeay 1.75..1.77 is used, see RT#116795
2.035 2016/08/11
- fixes for issues introduced in 2.034
- return with error in configure_SSL if context creation failed. This
might otherwise result in a segmentation fault later.
- apply builtin defaults before any (user configurable) global settings
(i.e. done with set_defaults, set_default_context...) so that builtins
don't replace user settings
Thanks to joel[DOT]a[DOT]berger[AT]gmail[DOT]com for reporting
2.034 2016/08/08
- move handling of global SSL arguments into creation of context, so that these
get also applied when creating a context only.
2.033 2016/07/15
- support for session ticket reuse over multiple contexts and processes
(if supported by Net::SSLeay)
- small optimizations, like saving various Net::SSLeay constants into variables
and access variables instead of calling the constant sub all the time
- make t/dhe.t work with openssl 1.1.0
2.032 2016/07/12
- Set session id context only on the server side. Even if the documentation for
SSL_CTX_set_session_id_context makes clear that this function is server side
only it actually affects hndling of session reuse on the client side too and
can result in error "SSL3_GET_SERVER_HELLO:attempt to reuse session in
different context" at the client.
2.031 2016/07/08
- fix for bug in session handling introduced in 2.031, RT#115975
Thanks to paul[AT]city-fan[DOT]org for reporting
2.030 2016/07/08
- Utils::CERT_create - don't add given extensions again if they were already
added. Firefox croaks with sec_error_extension_value_invalid if (specific?)
extensions are given twice.
- assume that Net::SSLeay::P_PKCS12_load_file will return the CA certificates
with the reverse order as in the PKCS12 file, because that's what it does.
- support for creating ECC keys in Utils once supported by Net::SSLeay
- remove internal sub session_cache and access cache directly (faster)
2.029 2016/06/26
- fix del_session method in case a single item was in the cache
- use SSL_session_key as the real key for the cache and not some derivate of it,
so that it works to remove the entry using the same key
2.028 2016/06/26
- add del_session method to session cache
2.027 2016/04/20
- only added Changes for 2.026
2.026 2016/04/20
- update default server and client ciphers based on recommendation of
Mozilla and what the current browsers use. Notably this finally disables
RC4 for the client (was disabled for server long ago) and adds CHACHA20.
2.025 2016/04/04
- Resolved memleak if SSL_crl_file was used: RT#113257, RT#113530
Thanks to avi[DOT]maslati[AT]forescout[DOT]com and
mark[DOT]kurman[AT]gmail[DOT]com for reporting the problem
2.024 2016/02/06
- Work around issue where the connect fails on systems having only a loopback
interface and where IO::Socket::IP is used as super class (default when
available). Since IO::Socket::IP sets AI_ADDRCONFIG by default connect to
localhost would fail on this systems. This happened at least for the tests,
see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=813796
Workaround is to explicitly set GetAddrInfoFlags to 0 if no GetAddrInfoFlags
is set but the Family/Domain is given. In this case AI_ADDRCONFIG would not
be useful anyway but would cause at most harm.
2.023 2016/01/30
- OpenSSL 1.0.2f changed the behavior of SSL shutdown in case the TLS connection
was not fully established (commit: f73c737c7ac908c5d6407c419769123392a3b0a9).
This somehow resulted in Net::SSLeay::shutdown returning 0 (i.e. keep trying)
which caused an endless loop. It will now ignore this result in case the TLS
connection was not yet established and consider the TLS connection closed
instead.
2.022 2015/12/10
- fix stringification of IPv6 inside subjectAltNames in Utils::CERT_asHash.
Thanks to Mark.Martinec[AT]ijs[DOT]si for reporting in #110253
2.021 2015/12/02
- Fixes for documentation and typos thanks to DavsX and jwilk.
- Update PublicSuffix with latest version from publicsuffix.org
2.020 2015/09/20
- support multiple directories in SSL_ca_path as proposed in RT#106711
by dr1027[AT]evocat[DOT]ne. Directories can be given as array or as string
with a path separator, see documentation.
- typos fixed thanks to jwilk https://github.com/noxxi/p5-io-socket-ssl/pull/34
2.019 2015/09/01
- work around different behavior of getnameinfo from Socket and Socket6 by
using a different wrapper depending on which module I use for IPv6.
Thanks to bluhm for reporting.
2.018 2015/08/27
- RT#106687 - startssl.t failed on darwin with old openssl since server
requested client certificate but offered also anon ciphers
2.017 2015/08/24
- checks for readability of files/dirs for certificates and CA no longer use
-r because this is not safe when ACLs are used. Thanks to BBYRD, RT#106295
- new method sock_certificate similar to peer_certificate based on idea of
Paul Evans, RT#105733
- get_fingerprint can now take optional certificate as argument and compute
the fingerprint of it. Useful in connection with sock_certificate.
- check for both EWOULDBLOCK and EAGAIN since these codes are different on
some platforms. Thanks to Andy Grundman, RT#106573
- enforce default verification scheme if none was specified, i.e. no longer
just warn but accept. If really no verification is wanted a scheme of
'none' must be explicitly specified.
- support different cipher suites per SNI hosts
2.016 2015/06/02
- add flag X509_V_FLAG_TRUSTED_FIRST by default if available in OpenSSL
(since 1.02) and available with Net::SSLeay. RT#104759 (thanks GAAS)
- work around hanging prompt() with older perl in Makefile.PL RT#104731
- make t/memleak_bad_handshake.t work on cygwin and other systems having
/proc/pid/statm, see RT#104659
- add better debugging based on patch from H.Merijn Brand
2.015 2015/05/13
- work around problem with IO::Socket::INET6 on windows, by explicitly using
Domain AF_INET in the tests.
Fixes RT#104226 reported by CHORNY
2.014 2015/05/05
- Utils::CERT_create - work around problems with authorityInfoAccess, where
OpenSSL i2v does not create the same string as v2i expects
- Intercept - don't clone some specific extensions which make only sense with
the original certificate
2.013 2015/05/01
- assign severities to internal error handling and make sure that follow-up
errors like "configuration failed" or "certificate verify error" don't
replace more specific "hostname verification failed" when reporting in
sub errstr/$SSL_ERROR. see also RT#103423
- enhanced documentation thanks to Chase Whitener
https://github.com/noxxi/p5-io-socket-ssl/pull/26
2.012 2015/02/02
- fix t/ocsp.t in case no HTTP::Tiny is installed
2.011 2015/02/01
- fix t/ocsp.t - don't count on revoked.grc.com using OCSP stapling #101855
- added option 'purpose' to Utils::CERT_create to get better control of the
certificates purpose. Default is 'server,client' for non-CA (contrary to
only 'server' before)
- removed RC4 from default cipher suites on the server site
https://github.com/noxxi/p5-io-socket-ssl/issues/22
- refactoring of some tests using Test::More thanks to Sweet-kid and the
2015 Pull Request Challenge
2.010 2015/01/14
- new options SSL_client_ca_file and SSL_client_ca to let the server send
the list of acceptable CAs for the client certificate.
- t/protocol_version.t - fix in case SSLv3 is not supported in Net::SSLeay.
RT#101485, thanks to TEAM.
2.009 2015/01/12
- remove util/analyze.pl. This tool is now together with other SSL tools in
https://github.com/noxxi/p5-ssl-tools
- added ALPN support (needs OpenSSL1.02, Net::SSLeay 1.56+) thanks to TEAM,
RT#101452
2.008 2014/12/16
- work around recent OCSP verification errors for revoked.grc.com (badly signed
OCSP response, Firefox also complains about it) in test t/external/ocsp.t.
- util/analyze.pl - report more details about preferred cipher for specific TLS
versions
2.007 2014/11/26
- make getline/readline fall back to super class if class is not sslified yet,
i.e. behave the same as sysread, syswrite etc.
This fixes RT#100529
2.006 2014/11/22
- Make (hopefully) non-blocking work on windows by using EWOULDBLOCK instead of
EAGAIN. While this is the same on UNIX it is different on Windows and socket
operations return there (WSA)EWOULDBLOCK and not EAGAIN. Enable non-blocking
tests on Windows too.
- make PublicSuffix::_default_data thread safe
- update PublicSuffix with latest list from publicsuffix.org
2.005 2014/11/15
- next try to fix t/protocol_version.t for OpenSSL w/o SSLv3 support
2.004 2014/11/15
- only test fix: fix t/protocol_version.t to deal with OpenSSL installations
which are compiled without SSLv3 support.
2.003 2014/11/14
- make SSLv3 available even if the SSL library disables it by default in
SSL_CTX_new (like done in LibreSSL). Default will stay to disable SSLv3,
so this will be only done when setting SSL_version explicitly.
- fix possible segmentation fault when trying to use an invalid certificate,
reported by Nick Andrew.
- Use only the ICANN part of the default public suffix list and not the
private domains. This makes existing exceptions for s3.amazonaws.com and
googleapis.com obsolete. Thanks to Gervase Markham from mozilla.org.
2.002 2014/10/21
- fix check for (invalid) IPv4 when validating hostname against certificate. Do
not use inet_aton any longer because it can cause DNS lookups for malformed
IP. RT#99448, thanks to justincase[AT]yopmail[DOT]com.
- Update PublicSuffix with latest version from publicsuffix.org - lots of new
top level domains.
- Add exception to PublicSuffix for s3.amazonaws.com - RT#99702, thanks to
cpan[AT]cpanel[DOT]net.
2.001 2014/10/21
- Add SSL_OP_SINGLE_(DH|ECDH)_USE to default options to increase PFS security.
Thanks to Heikki Vatiainen for suggesting.
- Update external tests with currently expected fingerprints of hosts.
- Some fixes to make it still work on 5.8.1.
2.000 2014/10/15
- consider SSL3.0 as broken because of POODLE and disable it by default.
- Skip live tests without asking if environment NO_NETWORK_TESTING is set.
Thanks to ntyni[AT]debian[DOT]org for suggestion.
- skip tests which require fork on non-default windows setups without proper
fork. Thanks to SHAY for https://github.com/noxxi/p5-io-socket-ssl/pull/18
1.999 2014/10/09
- make sure we don't use version 0.30 of IO::Socket::IP
- make sure that PeerHost is checked on all places where PeerAddr is
checked, because these are synonyms and IO::Socket::IP prefers PeerHost
while others prefer PeerAddr. Also accept PeerService additionally to
PeerPort.
See https://github.com/noxxi/p5-io-socket-ssl/issues/16 for details.
- add ability to use client certificates and to overwrite hostname with
util/analyze-ssl.pl.
1.998 2014/09/07
- make client authentication work at the server side when SNI is in by use
having CA path and other settings in all SSL contexts instead of only the main
one. Based on code from lundstrom[DOT]jerry[AT]gmail[DOT]com,
https://github.com/noxxi/p5-io-socket-ssl/pull/15
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The default does not work for this recipe.
* Add a note that perl-module-encode should be preferred over
this package unless a newer version than what is provided
by perl is needed.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The default does not work for this recipe.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
I have been, in practice, maintaining meta-perl for several
years now. Given discussion at OEDEM, make it official.
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Recipe depends on radius which is located in meta-networking
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Several recipes require items that are in the openembedded layer
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* Use COPYRIGHT excerpt from README for license check
- Remains the same perl5 license
- LICENSE contents is unhelpful "FULLTEXT"
* Correct copy-paste error in SUMMARY
* Author is now LEONT instead of KWILLIAMS
* Update HOMEPAGE
* Add interpreter fix from meta-cpan for lib/Module/Build/Base.pm
Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
- logcheck depends on mime-construct which is in meta-perl,
so move it to meta-perl to avoid that meta-oe depends on
meta-perl.
- logcheck should not be run as root, so inherit useradd
and add proper user and group.
- Add missing runtime dependencies according to the file
debian/control and simple test by running "logcheck -ot".
- For syslog, debian directly depends on rsyslog, but logcheck
works with any syslog and we have busybox-syslog, sysklogd,
syslog-ng and rsyslog, so use VIRTUAL-RUNTIME_syslog for the
syslog dependency and set rsyslog as the default, which can be
easily overridden in distro conf file or local.conf.
- Don't install /var/lock when populating rootfs. Do it
through volatile.
- install header.txt for generated mails
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Immediate expansion for PERLVERSION(in perl-version.bbclass)
is too early, it will result in 'None' before perl is built,
then the module file is installed incorrectly:
$ rpm -ql adduser|grep Common
/usr/lib/perl/None/Debian/AdduserCommon.pm
So use get_perl_version directly instead of PERLVERSION.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Update the start and end marker for the license and verify the terms are the same
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Add the following dependencies to DEPENDS and RRECOMMENDS_${PN}, to
let po4a and po4a-native work with full functionalities:
- libtext-wrapi18n-perl
- libterm-readkey-perl
- liblocale-gettext-perl
- libunicode-linebreak-perl
Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Unicode::LineBreak - UAX #14 Unicode Line Breaking Algorithm.
It's being strongly recommended by po4a.
Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Text::WrapI18N - Line wrapping module with support for multibyte,
fullwidth, and combining characters and languages without whitespaces
between words.
It's being strongly recommended by po4a.
Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Text::CharWidth - Get number of occupied columns of a string on
terminal.
It's being depended by libtext-wrapi18n-perl.
Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Locale::gettext - message handling functions.
It's being strongly recommended by po4a.
Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Term::ReadKey - A perl module for simple terminal control.
It's being strongly recommended by po4a.
Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
MIME::Charset - Charset Information for MIME.
It's being depended by libunicode-linebreak-perl.
Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
This module provides subroutines to read or write
entire files with a simple call. It also has a
subroutine for reading the list of filenames
in a directory.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The po4a (PO for anything) project goal is to ease translations (and
more interestingly, the maintenance of translations) using gettext
tools on areas where they were not expected like documentation.
Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The Authen::Radius module provides a simple class that
allows you to send/receive Radius requests/responses
to/from a Radius server.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Net-Telnet Perl module, it allows you to make client
connections to a TCP port and do network I/O, especially
to a port using the TELNET protocol.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
