commit perl-LWP-Protocol-https for openSUSE:Factory

Hello community, here is the log from the commit of package perl-LWP-Protocol-https for openSUSE:Factory checked in at 2013-07-04 18:05:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/perl-LWP-Protocol-https (Old) and /work/SRC/openSUSE:Factory/.perl-LWP-Protocol-https.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "perl-LWP-Protocol-https" Changes: -------- --- /work/SRC/openSUSE:Factory/perl-LWP-Protocol-https/perl-LWP-Protocol-https.changes 2012-03-01 17:25:00.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.perl-LWP-Protocol-https.new/perl-LWP-Protocol-https.changes 2013-07-04 18:05:12.000000000 +0200 @@ -1,0 +2,9 @@ +Wed Jul 3 09:32:03 UTC 2013 - lnussel@suse.de + +- Version 6.04 + * Fix IO::Socket::SSL warnings when not verifying hostname. + * Doc spelling fix. +- Remove usage of Mozilla::CA entirely. IO::Socket::SSL will do the + right thing instead. + +------------------------------------------------------------------- Old: ---- LWP-Protocol-https-6.03-systemca.diff New: ---- LWP-Protocol-https-6.04-systemca.diff LWP-Protocol-https-6.04.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-LWP-Protocol-https.spec ++++++ --- /var/tmp/diff_new_pack.EN5niS/_old 2013-07-04 18:05:13.000000000 +0200 +++ /var/tmp/diff_new_pack.EN5niS/_new 2013-07-04 18:05:13.000000000 +0200 @@ -1,7 +1,7 @@ # # spec file for package perl-LWP-Protocol-https # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: perl-LWP-Protocol-https -Version: 6.03 +Version: 6.04 Release: 0 %define cpan_name LWP-Protocol-https Summary: Provide https support for LWP::UserAgent @@ -26,7 +26,7 @@ Url: http://search.cpan.org/dist/LWP-Protocol-https/ Source: http://www.cpan.org/authors/id/G/GA/GAAS/%{cpan_name}-%{version}.tar.gz # patch for using system certificates -Patch0: %{cpan_name}-6.03-systemca.diff +Patch0: %{cpan_name}-6.04-systemca.diff BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: perl ++++++ LWP-Protocol-https-6.03-systemca.diff -> LWP-Protocol-https-6.04-systemca.diff ++++++ --- /work/SRC/openSUSE:Factory/perl-LWP-Protocol-https/LWP-Protocol-https-6.03-systemca.diff 2012-03-01 17:25:00.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.perl-LWP-Protocol-https.new/LWP-Protocol-https-6.04-systemca.diff 2013-07-04 18:05:12.000000000 +0200 @@ -1,12 +1,89 @@ -Index: LWP-Protocol-https-6.03/lib/LWP/Protocol/https.pm -=================================================================== ---- LWP-Protocol-https-6.03.orig/lib/LWP/Protocol/https.pm 2012-02-18 23:53:36.000000000 +0100 -+++ LWP-Protocol-https-6.03/lib/LWP/Protocol/https.pm 2012-02-21 12:32:56.614080436 +0100 -@@ -20,6 +20,7 @@ sub _extra_sock_opts - $ssl_opts{SSL_verifycn_scheme} = 'www'; +From 39d26115250c9c233018e487ce495e5a16faacc2 Mon Sep 17 00:00:00 2001 +From: Ludwig Nussel +Date: Wed, 3 Jul 2013 11:25:38 +0200 +Subject: [PATCH] Don't require Mozilla::CA + +IO::Socket::SSL will fall back to using the system's root +CA-certificates if no options are passed. +--- + Makefile.PL | 1 - + README | 9 +-------- + lib/LWP/Protocol/https.pm | 23 ----------------------- + 3 files changed, 1 insertion(+), 32 deletions(-) + +diff --git a/Makefile.PL b/Makefile.PL +index 805eac8..3c66fb7 100644 +--- a/Makefile.PL ++++ b/Makefile.PL +@@ -15,7 +15,6 @@ WriteMakefile( + 'LWP::UserAgent' => '6.04', + 'Net::HTTPS' => 6, + 'IO::Socket::SSL' => "1.54", +- 'Mozilla::CA' => "20110101", + }, + META_MERGE => { + resources => { +diff --git a/README b/README +index 8e67078..7c4b5e2 100644 +--- a/README ++++ b/README +@@ -13,13 +13,6 @@ DESCRIPTION + you don't use it directly. Once the module is installed LWP is able to + access sites using HTTP over SSL/TLS. + +- If hostname verification is requested by LWP::UserAgent's `ssl_opts', +- and neither `SSL_ca_file' nor `SSL_ca_path' is set, then `SSL_ca_file' +- is implied to be the one provided by Mozilla::CA. If the Mozilla::CA +- module isn't available SSL requests will fail. Either install this +- module, set up an alternative `SSL_ca_file' or disable hostname +- verification. +- + This module used to be bundled with the libwww-perl, but it was + unbundled in v6.02 in order to be able to declare its dependencies + properly for the CPAN tool-chain. Applications that need https support +@@ -27,7 +20,7 @@ DESCRIPTION + longer need to know what underlying modules to install. + + SEE ALSO +- IO::Socket::SSL, Crypt::SSLeay, Mozilla::CA ++ IO::Socket::SSL, Crypt::SSLeay + + COPYRIGHT + Copyright 1997-2011 Gisle Aas. +diff --git a/lib/LWP/Protocol/https.pm b/lib/LWP/Protocol/https.pm +index f7230e2..e210049 100644 +--- a/lib/LWP/Protocol/https.pm ++++ b/lib/LWP/Protocol/https.pm +@@ -22,29 +22,6 @@ sub _extra_sock_opts + else { + $ssl_opts{SSL_verify_mode} = 0; } - if ($ssl_opts{SSL_verify_mode}) { -+ $ssl_opts{SSL_ca_path} ||= '/etc/ssl/certs'; - unless (exists $ssl_opts{SSL_ca_file} || exists $ssl_opts{SSL_ca_path}) { - eval { - require Mozilla::CA; +- if ($ssl_opts{SSL_verify_mode}) { +- unless (exists $ssl_opts{SSL_ca_file} || exists $ssl_opts{SSL_ca_path}) { +- eval { +- require Mozilla::CA; +- }; +- if ($@) { +- if ($@ =! /^Can't locate Mozilla\/CA\.pm/) { +- $@ = <<'EOT'; +-Can't verify SSL peers without knowing which Certificate Authorities to trust +- +-This problem can be fixed by either setting the PERL_LWP_SSL_CA_FILE +-envirionment variable or by installing the Mozilla::CA module. +- +-To disable verification of SSL peers set the PERL_LWP_SSL_VERIFY_HOSTNAME +-envirionment variable to 0. If you do this you can't be sure that you +-communicate with the expected peer. +-EOT +- } +- die $@; +- } +- $ssl_opts{SSL_ca_file} = Mozilla::CA::SSL_ca_file(); +- } +- } + $self->{ssl_opts} = \%ssl_opts; + return (%ssl_opts, $self->SUPER::_extra_sock_opts); + } +-- +1.8.1.4 + -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org