Changelog:
===========
* Fix typo in Makefile.PL
* Compress::Raw::Zlib version 2.222 required--this is only version 2.221
Update to version 2.223
* Tag `:constants` no longer exports all constants Fixes#78, #64
* Bump actions/checkout from 6 to 7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
- Close socket by default on failed SSL handshake when created with new, but
keep open when upgrading from existing socket with start_SSL. This restores
old behavior which was accidentally broken.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
* remove use of eval in globmapper. #73
* Update zipdetails to version 4.006.
* Fix typo in fastForward #72
* Fix issue with "rawdeflate` option in AnyInflate.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- Another fix to issue #175 to make sure that an unblessed sockets gets
blessed in place instead of using new_from_fd. Document that it will
not retain original class with unblessed sockets on error, since this
never worked anyway (there is no native unbless)
2.097 2026/01/06
- fix issue #175 with upgrading from plain socket (no object) by using
correct fdopen mode +< instead of <+
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
- Allow stacking TLS layers with SSL_usebio
This also allows LWP (after patches) to access https site through TLS
enabled proxy
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- regression: make sysread set buffer to empty string again when returning
EOf. Fixes#171
- fixed memory leak introduced in 2.092
- Another rework for one-sided SSL shutdown, to a) implement a useful and secure
behavior and b) without affecting existing applications. 2.092 had still
unwanted side effects
- rework implementation and behavior for one-sided SSL shutdown. Implementation
in 2.091 lead to some problems with Net::FTP and others.
- fix behavior on one-sided SSL shutdown. If the application continued
to read after half-closing the SSL connection this could result in reading
encrypted data (i.e. close notify, SSL session tickets ...).
See documentation of stop_SSL for detailed description of handling
half-closed SSL connections.
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Please see
https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265
for what changes are needed, and sed commands that can be used to make them en masse.
I've verified that bitbake -c patch world works with these, but did not run a world
build; the majority of recipes shouldn't need further fixups, but if there are
some that still fall out, they can be fixed in followups.
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- fix OCSP live test after Let's Encrypt has disabled OCSP support
- public_suffix now preserves trailing dot
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- new option SSL_force_fingerprint to enforce fingerprint matching even if
certificate validation would be successful without
- document _get_ssl_object and _get_ctx_object for cases, where direct use of
Net::SSLeay functions is needed
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- minor fixes for use on ancient versions of perl and for building with
newer versions of openssl
- support for PSK, see SSL_psk in documentation
- internal optimzation: implement _touch_entry in session cache instead
of using del+add.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- #147 fix test which failed due to behavior changes in OpenSSL 3.2
- update PublicSuffix
- add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The command "bitbake universe -c fetch" currently throws a ton of warnings
as there are many 'impossible' dependencies.
In some cases these variants may never have worked and were just added by copy
and paste of recipes. In some cases they once clearly did work but became
broken somewhere along the way. Users may also be carrying local bbappend files
which add further BBCLASSEXTEND.
Having universe fetch work without warnings is desireable so clean up the broken
variants. Anyone actually needing something dropped here can propose adding it
and the correct functional dependencies back quite easily. This also then
ensures we're not carrying or fixing things nobody uses.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This ensures that all ptests can pass, libidn wrapper does not seem to
find the library and as a result the idn tests fail.
Fixes
Failed ptests:
{'libio-socket-ssl-perl': ['t/verify_hostname']}
as they are now skipped
ok 78 # skip no IDN support with Net::LibIDN
ok 79 # skip no IDN support with Net::LibIDN
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
* Merge branch 'master' of https://github.com/pmqs/IO-Compress
* Merge pull request #50 from haarg/fix-version-check
* fix version checks to use correct method
* drop rt.cpan from SUPPORT section
* add perl 5.38
* add on workflow_dispatch
* Add some OO examples
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
* drop rt.cpan from SUPPORT section
* add perl 5.38
* add on workflow_dispatch
* Add some OO examples
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- fix memory leak in session cache, thanks to genuaboro
- more race conditions in tests fixed thanks to jddurand
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
These modules do not follow our Debian naming and should never have been
allowed to be added as libio/compress-raw*.bb.
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The create_spdx bbclass does not currently handle the lack of
spaces around the op (| or &). For now fix the LICENSE string.
Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
These recipes are using target perl install during build so they can not be
allarch, the issue becomes evident when libdir for target the native
build hosts do not match e.g. ppc64 where target libdir is usr/lib64
then the do_configure starts to fail because it can not find
Config_heavy-target.pl script which is part of tatget perl install and
allarch recipes seems to assume libdir defaults to /usr/lib when
accessing it.
I think it can be fixed by perhaps building the missing perl files into
perl native perhaps.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Hongxu Jia <hongxu.jia@windriver.com>
Cc: Tim "moto-timo" Orling <ticotimo@gmail.com>
Changelog:
=========
- add SSL_ciphersuites option for TLS 1.3 ciphers
- no longer use own default for ciphers, instead use system default but disable
some weak ciphers which might still be enabled on older systems
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2.072
- add PEM_certs2file and PEM_file2certs in IO::Socket::SSL::Utils based
on idea by rovo89 in #101
- certs/*.p12 used for testing should now work with OpenSSL 3.0 too #108
- update public suffix database
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Khem Raj
Wang Mingyu
Liu Yiding
Alexander Kanavin
J. S.
Khem Raj
Richard Purdie
Tim Orling
Saul Wold
Sakib Sajal
zangrc