/ 
IO-Socket-SSL-1.13_4
River stage four • 359 direct dependents • 2094 total dependents
Security Advisories (2)
CVE-2010-4334 (2011-01-14)

The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.

CVE-2009-3024 (2009-08-31)

The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate.

Changes for version v1.13_4

  • added support for verification of hostname from certificate including subjectAltNames, support for IDN etc based on patch and input from christopher[AT]odenbachs[DOT]de and achim[AT]grolmsnet[DOT]de. It is also possible to get more information from peer_certificate based on this patch. See documentation for peer_certificate and verify_hostname
  • automatic verification of hostnames with SSL_verifycn_scheme and SSL_verifycn_name
  • global setting of default context options like SSL_verifycn_scheme, SSL_verify_mode with set_ctx_defaults

Modules

IO::Socket::SSL
Nearly transparent SSL encapsulation for IO::Socket::INET.

Provides

IO::Socket::SSL::SSL_Context
in SSL.pm
IO::Socket::SSL::SSL_HANDLE
in SSL.pm
IO::Socket::SSL::Session_Cache
in SSL.pm

Examples

Other files