Codebase list libcrypt-ssleay-perl / bb3efec3-b6bc-415e-9df1-af104794e5bd/main debian / NEWS.Developer
bb3efec3-b6bc-415e-9df1-af104794e5bd/main

Tree @bb3efec3-b6bc-415e-9df1-af104794e5bd/main (Download .tar.gz)

NEWS.Developer @bb3efec3-b6bc-415e-9df1-af104794e5bd/mainraw · history · blame

libcrypt-ssleay-perl (0.72-1) UNRELEASED; urgency=medium

    A note from upstream to developers:
    .
    Starting with version 6.02 of LWP, https support was unbundled into
    LWP::Protocol::https. This module specifies as one of its prerequisites
    IO::Socket::SSL which is automatically used by LWP::UserAgent unless
    this preference is overridden separately. IO::Socket::SSL is a more
    complete implementation, and, crucially, it allows hostname
    verification. Crypt::SSLeay does not support this. At this point,
    Crypt::SSLeay is maintained to support existing software that already
    depends on it.
    .
    However, it is possible that your software does not really depend on
    Crypt::SSLeay, only on the ability of LWP::UserAgent class to
    communicate with sites over SSL/TLS.
    .
    If are using version LWP 6.02 or later, and therefore have installed
    LWP::Protocol::https and its dependencies, and do not explicitly use
    Net::SSL before loading LWP::UserAgent, or override the default socket
    class, you are probably using IO::Socket::SSL and do not really need
    Crypt::SSLeay.
    .
    Before installing Crypt::SSLeay, you may want to try specifying a
    dependency on LWP::Protocol::https.

 -- Harlan Lieberman-Berg <H.LiebermanBerg@gmail.com>  Mon, 28 Apr 2014 18:27:22 -0400