Changes for version 1.950

  • MAJOR BEHAVIOR CHANGE: ssl_verify_mode now defaults to verify_peer for client. Until now it used verify_none, but loudly complained since 1.79 about it. It will not complain any longer, but the connection might probably fail. Please don't simply disable ssl verification, but instead set SSL_ca_file etc so that verification succeeds!
  • MAJOR BEHAVIOR CHANGE: it will now complain if the builtin defaults of certs/my-ca.pem or ca/ for CA and certs/{server,client}-{key,cert}.pem for cert and key are used, e.g. no certificates are specified explicitly. In the future these insecure (relative path!) defaults will be removed and the CA replaced with the system defaults.

Modules

SSL sockets with IO::Socket interface
SSL interception (man in the middle)
loading, storing, creating certificates and keys

Provides

in lib/IO/Socket/SSL.pm
in lib/IO/Socket/SSL.pm
in lib/IO/Socket/SSL.pm