/ 
IO-Socket-SSL-1.998
River stage four • 359 direct dependents • 2094 total dependents
⭐ Starred 37 GitHub stars
Security Advisories (1)
CVE-2009-3024 (2009-08-31)

The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate.

Changes for version 1.998 - 2014-09-07

  • make client authentication work at the server side when SNI is in by use having CA path and other settings in all SSL contexts instead of only the main one. Based on code from lundstrom[DOT]jerry[AT]gmail[DOT]com, https://github.com/noxxi/p5-io-socket-ssl/pull/15

Modules

IO::Socket::SSL
SSL sockets with IO::Socket interface
IO::Socket::SSL::Intercept
SSL interception (man in the middle)
IO::Socket::SSL::PublicSuffix
provide access to Mozillas list of effective TLD names
IO::Socket::SSL::Utils
loading, storing, creating certificates and keys

Provides

IO::Socket::SSL::OCSP_Cache
in lib/IO/Socket/SSL.pm
IO::Socket::SSL::OCSP_Resolver
in lib/IO/Socket/SSL.pm
IO::Socket::SSL::SSL_Context
in lib/IO/Socket/SSL.pm
IO::Socket::SSL::SSL_HANDLE
in lib/IO/Socket/SSL.pm
IO::Socket::SSL::Session_Cache
in lib/IO/Socket/SSL.pm

Examples

Other files