Changes for version 1.75 - 2016-07-31
- Compatibility with OpenSSL 1.1, tested with openssl-1.1.0-pre5:
- Conditionally remove threading locking code, not needed in 1.1
- Rewrite code that accesses inside X509_ATTRIBUTE struct.
- SSL_CTX_need_tmp_RSA, SSL_CTX_set_tmp_rsa, SSL_CTX_set_tmp_rsa_callback, SSL_set_tmp_rsa_callback support not available in 1.1.
- SSL_session_reused is now native
- SSL_get_keyblock_size modifed to use new API
- OCSP functions modified to use new API under 1.1
- SSL_set_state removed with 1.1
- SSL_get_state and SSL_state are now equivalent and available in all versions
- SSL_CTX_v2_new removed
- SESSION_set_master_key removed with 1.1. Code that previously used SESSION_set_master_key must now set $secret in the session_secret callback set with SSL_set_session_secret_cb
- With 1.1, $secret in the session_secret callback set with SSL_set_session_secret_cb can be changed to alter the master key (required by EAP-FAST). Added a function EC_KEY_generate_key similar to RSA_generate_key and a function EVP_PKEY_assign_EC_KEY similar to EVP_PKEY_assign_RSA. Using these functions it is easy to create and use EC keys in the same way as RSA keys. Patch provided by Steffen Ullrich. Thanks Steffen. Testing with LibreSSL 2.4.1, with compatibility patch from Steffen Ullrich. Thanks Steffen. Patch from Steffen Ulrich provides support for cross context (and cross process) session sharing using the stateless TLS session tickets. It uses the SSL_CTX_set_tlsext_ticket_key_cb function to manage the encryption and decryption of the tickets but provides a more simplified interface. Includes new function CTX_set_tlsext_ticket_getkey_cb. To not conflict with the OpenSSL name in case the more complex interface will be implemented ever the current simplified interface is called slightly different: CTX_set_tlsext_ticket_*get*key_cb. Added documentation about downloading latest version from SVN. Added missing Module/install files to SVN.
Modules
Perl extension for using OpenSSL
Perl module that lets SSL (HTTPS) sockets be handled as standard file handles.
Examples
- examples/bio.pl
- examples/bulk.pl
- examples/callback.pl
- examples/cb-testi.pl
- examples/cli-cert.pl
- examples/ephemeral.pl
- examples/get_authenticated_page.pl
- examples/get_page.pl
- examples/get_page_cert.pl
- examples/https-proxy-snif.pl
- examples/makecert.pl
- examples/minicli.pl
- examples/passwd-cb.pl
- examples/req.conf
- examples/server_key.pem
- examples/ssl-inetd-serv.pl
- examples/ssl_diff.pl
- examples/sslcat.pl
- examples/sslecho.pl
- examples/stdio_bulk.pl
- examples/tcpcat.pl
- examples/tcpecho.pl
- examples/x509_cert_details.pl