IO-Socket-SSL-2.066

[Douglas R. Reno]

New minor version

[Bruce Dubbs]

Lots of changes lately.

2.066

• fix test t/verify_partial_chain.t by using the newly exposed function can_partial_chain instead of guessing (wrongly) if the functionality is available

2.065

• make sure that Net::SSLeay::CTX_get0_param is defined before using X509_V_FLAG_PARTIAL_CHAIN. Net::SSLeay 1.85 defined only the second with LibreSSL 2.7.4 but not the first ​https://rt.cpan.org/Ticket/Display.html?id=128716
• prefer AES for server side cipher default since it is usually hardware-accelerated

2.064

• make algorithm for fingerprint optional, i.e. detect based on length of fingerprint - ​https://rt.cpan.org/Ticket/Display.html?id=127773
• fix t/sessions.t and improve stability of t/verify_hostname.t on windows
• use CTX_set_ecdh_auto when needed (OpenSSL 1.0.2) if explicit curves are set
• update fingerprints for live tests

2.063

• support for both RSA and ECDSA certificate on same domain
• update PublicSuffix
• Refuse to build if Net::SSLeay is compiled with one version of OpenSSL but then linked against another API-incompatible version (ie. more than just the patchlevel differs).

2.062

• Enable X509_V_FLAG_PARTIAL_CHAIN if supported by Net::SSLeay (1.83+) and OpenSSL (1.1.0+). This makes leaf certificates or intermediate certificates in the trust store be usable as full trust anchors too.

[Bruce Dubbs]

Fixed at revision 21291.

[Bruce Dubbs]

Milestone renamed