Changes for version 2.017 - 2015-08-24

  • checks for readability of files/dirs for certificates and CA no longer use -r because this is not safe when ACLs are used. Thanks to BBYRD, RT#106295
  • new method sock_certificate similar to peer_certificate based on idea of Paul Evans, RT#105733
  • get_fingerprint can now take optional certificate as argument and compute the fingerprint of it. Useful in connection with sock_certificate.
  • check for both EWOULDBLOCK and EAGAIN since these codes are different on some platforms. Thanks to Andy Grundman, RT#106573
  • enforce default verification scheme if none was specified, i.e. no longer just warn but accept. If really no verification is wanted a scheme of 'none' must be explicitely specified.
  • support different cipher suites per SNI hosts

Modules

SSL sockets with IO::Socket interface
SSL interception (man in the middle)
provide access to Mozillas list of effective TLD names
loading, storing, creating certificates and keys

Provides

in lib/IO/Socket/SSL.pm
in lib/IO/Socket/SSL.pm
in lib/IO/Socket/SSL.pm
in lib/IO/Socket/SSL.pm
in lib/IO/Socket/SSL.pm