ANNOUNCE: Crypt::SSLeay v.11

Joshua Chamas (joshua@chamas.com)
Tue, 17 Aug 1999 13:09:18 -0700


Hey,

I have taken over Crypt::SSLeay from Gisle Aas, and 
my latest v.11 of the module is in your local CPAN or at:

  http://www.perl.com/CPAN-local/modules/by-module/Crypt/

Installing Crypt::SSLeay enables https requests via 
the LWP::* libraries, so that you can do things like:

  lwp-request https://www.nodeworks.com

The latest version builds on both UNIX & WinNT, and
does some new tricks to connect reliably to all https
web sites tested, including SSLv3 only sites, and broken
SSLv2 sites.  Though you should use the module with OpenSSL,
it is backwards compatible with older versions of SSLeay.

If you have compiled the module on a new platform that isn't 
in the README's build list, please let me know, and I'll add it.
Below is the recent changes I've made to the module.

-- Joshua
______________________________________________________________________
Joshua Chamas                      Chamas Enterprises Inc.
NODEWORKS - web link monitoring    Long Beach, CA  USA  1-562-432-2469
http://www.nodeworks.com           http://www.chamas.com

$MODULE=Crypt::SSLeay; $VERSION = .11; $DATE="1999-08-16";

1999-08-16   Joshua Chamas <joshua@chamas.com>

+ = improvement; - = bug fix

+ New connection strategy suggested by OpenSSL list,
  first try connecting with SSLv23.  This negotiates
  the more secure SSL3 first, and then downgrades to
  SSLv2 if first unsuccessful.  For buggy servers that
  can't handle the SSLv23 negotiation, Net::SSL then
  tries a raw SSLv2 connection.

  This method works for all servers tested, and has
  the advantage of tranmitting data via the most secure
  SSL3 method if available.

+ Connects to buggy SSLv2 sites as well as SSLv3
  sites & normal SSLv2 sites.

  Buggy SSLv2:  https://banking.wellsfargo.com
  SSLv3:        https://www.accountonline.com/CB/MainMenu.idcl
  SSLv2:        https://www.nodeworks.com

1999-08-10   Joshua Chamas <joshua@chamas.com>

+ Worked through __umoddi3 undef symbol error
  for building on Solaris x86.  See README build notes.

+ I try to provide backwards compatible building
  with SSLeay (< v.0.9.2)

+ Will pick up ssl distributions installed at
  /usr/local/openssl, and /usr/local/ssl ... openssl
  headers should be at $SSL_DIR/include/openssl
  for compilation to work, see README for installation hints.

- Added SSL 3.0 support with SSLv3_client_method()
  This method will autonegotiate SSL2 or SSL3,
  and works for web sites that require SSL3

+ Added build support in Makefile.PL for WinNT, MS Visual C++

+ Added support for OpenSSL v.0.9.4