The Perl Toolchain Summit needs more sponsors. If your company depends on Perl, please support this very important event.
 / 
IO-Socket-SSL-1.967
River stage four • 342 direct dependents • 2021 total dependents
49 ++

Changes for version 1.967 - 2014-02-06

  • verify the hostname inside a certificate by default with a superset of common verification schemes instead of not verifying identity at all. For now it will only complain if name verification failed, in the future it will fail certificate verification, forcing you to set the expected SSL_verifycn_name if you want to accept the certificate.
  • new option SSL_fingerprint and new methods get_fingerprint and get_fingerprint_bin. Together they can be used to selectively accept specific certificates which would otherwise fail verification, like self-signed, outdated or from unknown CAs. This makes another reason to disable verification obsolete.
  • Utils:
    • default RSA key length 2048
    • digest algorithm to sign certificate in CERT_create can be given, defaults to SHA-256
    • CERT_create can now issue non-CA selfsigned certificate
    • CERT_create add some more useful constraints to certificate
  • spelling fixes, thanks to ville[dot]skytta[at]iki[dot]fi

Modules

IO::Socket::SSL
SSL sockets with IO::Socket interface
IO::Socket::SSL::Intercept
SSL interception (man in the middle)
IO::Socket::SSL::Utils
loading, storing, creating certificates and keys

Provides

IO::Socket::SSL::SSL_Context
in lib/IO/Socket/SSL.pm
IO::Socket::SSL::SSL_HANDLE
in lib/IO/Socket/SSL.pm
IO::Socket::SSL::Session_Cache
in lib/IO/Socket/SSL.pm

Examples

Other files