ANNOUNCE: Crypt::SSLeay v.11
Joshua Chamas (joshua@chamas.com)
Tue, 17 Aug 1999 13:09:18 -0700
Hey,
I have taken over Crypt::SSLeay from Gisle Aas, and
my latest v.11 of the module is in your local CPAN or at:
http://www.perl.com/CPAN-local/modules/by-module/Crypt/
Installing Crypt::SSLeay enables https requests via
the LWP::* libraries, so that you can do things like:
lwp-request https://www.nodeworks.com
The latest version builds on both UNIX & WinNT, and
does some new tricks to connect reliably to all https
web sites tested, including SSLv3 only sites, and broken
SSLv2 sites. Though you should use the module with OpenSSL,
it is backwards compatible with older versions of SSLeay.
If you have compiled the module on a new platform that isn't
in the README's build list, please let me know, and I'll add it.
Below is the recent changes I've made to the module.
-- Joshua
______________________________________________________________________
Joshua Chamas Chamas Enterprises Inc.
NODEWORKS - web link monitoring Long Beach, CA USA 1-562-432-2469
http://www.nodeworks.com http://www.chamas.com
$MODULE=Crypt::SSLeay; $VERSION = .11; $DATE="1999-08-16";
1999-08-16 Joshua Chamas <joshua@chamas.com>
+ = improvement; - = bug fix
+ New connection strategy suggested by OpenSSL list,
first try connecting with SSLv23. This negotiates
the more secure SSL3 first, and then downgrades to
SSLv2 if first unsuccessful. For buggy servers that
can't handle the SSLv23 negotiation, Net::SSL then
tries a raw SSLv2 connection.
This method works for all servers tested, and has
the advantage of tranmitting data via the most secure
SSL3 method if available.
+ Connects to buggy SSLv2 sites as well as SSLv3
sites & normal SSLv2 sites.
Buggy SSLv2: https://banking.wellsfargo.com
SSLv3: https://www.accountonline.com/CB/MainMenu.idcl
SSLv2: https://www.nodeworks.com
1999-08-10 Joshua Chamas <joshua@chamas.com>
+ Worked through __umoddi3 undef symbol error
for building on Solaris x86. See README build notes.
+ I try to provide backwards compatible building
with SSLeay (< v.0.9.2)
+ Will pick up ssl distributions installed at
/usr/local/openssl, and /usr/local/ssl ... openssl
headers should be at $SSL_DIR/include/openssl
for compilation to work, see README for installation hints.
- Added SSL 3.0 support with SSLv3_client_method()
This method will autonegotiate SSL2 or SSL3,
and works for web sites that require SSL3
+ Added build support in Makefile.PL for WinNT, MS Visual C++
+ Added support for OpenSSL v.0.9.4