开源软件构建与测试

_service:tar_scm:perl-IO-Socket-SSL.spec Changed

_service Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/client-cert.pem Deleted

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQjCCAiqgAwIBAgIFAPq2L4EwDQYJKoZIhvcNAQELBQAwIjEgMB4GA1UEAwwX
-SU86OlNvY2tldDo6U1NMIERlbW8gQ0EwHhcNMjEwODE2MDgyNjQ5WhcNMzEwODE0
-MDgyNjQ5WjAXMRUwEwYDVQQDDAxjbGllbnQubG9jYWwwggEiMA0GCSqGSIb3DQEB
-AQUAA4IBDwAwggEKAoIBAQC5Jm80NmZPNGFHEZxsNJ++TV1bSuMGm0E7bNzK8McZ
-vIt9hdX0QnAiKdiNDXOve4lLWTTogA0ZRD+YBwz5wFSSNrkXNNIbf3OsQrzVO0S4
-iKK8khEskzgVzCbw7H3zHJlNI/Ur6Vf5jlXrejRxrzZSTTSuE0mGvPnFmUO3msNC
-yYNlfgy+P43Y5iU5rTakyM4Z3s5VmIcYR3rtLKCV5RPYdbYFruViGCfm8UoKlyMk
-He2EC/GIaCE98UIi3sU9I3PC2nq7t/lHoSgUlrRI7oDddkQPsbzF2Ug8i1rq+FM2
-pwEsZ7ORytVsyEY6U30om6TzKTGhABo3CWrHci2I0vUFAgMBAAGjgYkwgYYwHQYD
-VR0OBBYEFOx484tqPH/BQYKPrwIHoBRGpqimMB8GA1UdIwQYMBaAFLnih3fCc4yg
-dSimBeBYvU5gw983MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMBEGCWCG
-SAGG+EIBAQQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAjANBgkqhkiG9w0BAQsF
-AAOCAQEAU/fWJ+Mgcq9R/wtDEJZ14UzZEsdLMgLq35FyHygyaTeHMw7XXXwRcen4
-wVIgPtP0A6QqeCUZKfjC/oUZRhcF91/0jBkuqieaoY286gN857b1U8CEj5tZ8Wcd
-ALLObbfd0a/wPxFqGRVJREu6DhzUVTcDoDWijAm0AxicvLtmfD7wvFGGiZPGCo7x
-82lH7ZGqjasdw+Q804LIynLWF93G5bR/BWXdw2LnEmCPrrqdzIymr1vkgSOYQaHx
-PUKQnkGv4jJd2mu/tMQqrH+c0KgL1yozhGCYg8K95VfY1pQR59oM1ephm0dbg5JP
-Fx4eW9n6OdBdAldA5dQUqaxCh+haGw==
------END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/client-key.enc Deleted

@@ -1,27 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpQIBAAKCAQEAuSZvNDZmTzRhRxGcbDSfvk1dW0rjBptBO2zcyvDHGbyLfYXV
-9EJwIinYjQ1zr3uJS1k06IANGUQ/mAcM+cBUkja5FzTSG39zrEK81TtEuIiivJIR
-LJM4Fcwm8Ox98xyZTSP1K+lX+Y5V63o0ca82Uk00rhNJhrz5xZlDt5rDQsmDZX4M
-vj+N2OYlOa02pMjOGd7OVZiHGEd67SygleUT2HW2Ba7lYhgn5vFKCpcjJB3thAvx
-iGghPfFCIt7FPSNzwtp6u7f5R6EoFJa0SO6A3XZED7G8xdlIPIta6vhTNqcBLGez
-kcrVbMhGOlN9KJuk8ykxoQAaNwlqx3ItiNL1BQIDAQABAoIBAAGp+8PfXUoG8Xzf
-BqXeTzU5osYoRSQRDyQGlXFpepCbpjFJm6OnWTSlZaHW5hxEovY/Zf9U70kz2NJ3
-9cDk3p21yjIQMnc2zQZWTzYnYzW5XKUPNwJMjGt9uzfdGECwGByeXxy26yh+A/2q
-yn/fEEDrGrcZy0ZfumrxNq+Wv3yBKTZBKYsvz9SFkLsbv91FWNciQOSgbQ3PRKWW
-So0qoNZVc8/XLVs2+Sa54xc80e4ys+UY+t8wQSCYRKYcwghLT2HftdEM+h8zCgmX
-sWP6G6yM1/LRbeF1DKk0ES1q6+ntXBWPisrdbHeJQ1OetOTImXrw/9GrUGTlSGsU
-QHLPiGECgYEA6DdkegpHNvbF+tadHhOlpXxVBDXCqrE+jgnnnPX2n8zOfhTTcPkz
-P8xUSOhQ8F3/d+na/YJkNLBcUdHEgPQlQNaZWiEebg3RjI/T2c0A4VJSqDWODvG3
-Hsujcj0ZL9rWtHsc+9P8XEmO6MMXBz+cBu3X3nShzLRKeUbGkPNHs90CgYEAzBz8
-iksRinW6ySuny6CxPGZMfozKQ75BqgRUKor9qfTtIaWrjy/QUdnWBW0R+Bce2oZA
-nQX14OIp6aHElKuBmWqxZdCVjqBQl1URh5y+ZlH6GgsWxVkpf9LRJHK34H2YqU3s
-P5rxGYkLyb2h8SIn7HRgNOSYhC8Ab9L1tHZCJ0kCgYEA0HgiENm3UyW5WNZgmQbE
-V8tFu5DT4U9bvEIyFxxNOuqvmkryA2ME2kqChC1jtFZ+qVVdTudHNHH7f0yVX7tO
-0mWVqG9BFUX8kHbyln5PQvkX0YC6trnTTqc8ZatqOCb7R22a+I036lXzIQ07WDuH
-xESz3jbQpqhYj4W1b52oClUCgYEAhT5O5YBHvRlJi9WBvf3ydTlaqioCR+LFPtWA
-lB0TpoUK37Ikol5WIXiQrA4dctS1AXYua9LeRaWeMrO1fk/PVHU/xPU7DFY/Bes0
-fFCoQmc1WxbuEHo6CwV2HdL9kgCrTapelM7yoPbDyTiPpLflVAhMXXr0zSVZpaYT
-W3DvknECgYEAjm126O1/vQX0Ed2jbhsRMfhX+r4nPOCrpqCDemDitcMT0ASwLv/S
-R8pWv2HNPDZZcytWVh9ORHyFhA+hfoLpHZQNgViCNOI92c9ytphIWPdKhE4pMAWX
-bnASqDwRaDFFnxp5TqOdwce4DFxQxQcxOPp6T6Ax7HZfHueeMjxw/Gw=
------END RSA PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/client-key.pem Deleted

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQC5Jm80NmZPNGFH
-EZxsNJ++TV1bSuMGm0E7bNzK8McZvIt9hdX0QnAiKdiNDXOve4lLWTTogA0ZRD+Y
-Bwz5wFSSNrkXNNIbf3OsQrzVO0S4iKK8khEskzgVzCbw7H3zHJlNI/Ur6Vf5jlXr
-ejRxrzZSTTSuE0mGvPnFmUO3msNCyYNlfgy+P43Y5iU5rTakyM4Z3s5VmIcYR3rt
-LKCV5RPYdbYFruViGCfm8UoKlyMkHe2EC/GIaCE98UIi3sU9I3PC2nq7t/lHoSgU
-lrRI7oDddkQPsbzF2Ug8i1rq+FM2pwEsZ7ORytVsyEY6U30om6TzKTGhABo3CWrH
-ci2I0vUFAgMBAAECggEAAan7w99dSgbxfN8Gpd5PNTmixihFJBEPJAaVcWl6kJum
-MUmbo6dZNKVlodbmHESi9j9l/1TvSTPY0nf1wOTenbXKMhAydzbNBlZPNidjNblc
-pQ83AkyMa327N90YQLAYHJ5fHLbrKH4D/arKf98QQOsatxnLRl+6avE2r5a/fIEp
-NkEpiy/P1IWQuxu/3UVY1yJA5KBtDc9EpZZKjSqg1lVzz9ctWzb5JrnjFzzR7jKz
-5Rj63zBBIJhEphzCCEtPYd+10Qz6HzMKCZexY/obrIzX8tFt4XUMqTQRLWrr6e1c
-FY+Kyt1sd4lDU5605MiZevD/0atQZOVIaxRAcs+IYQKBgQDoN2R6Ckc29sX61p0e
-E6WlfFUENcKqsT6OCeec9fafzM5+FNNw+TM/zFRI6FDwXf936dr9gmQ0sFxR0cSA
-9CVA1plaIR5uDdGMj9PZzQDhUlKoNY4O8bcey6NyPRkv2ta0exz70/xcSY7owxcH
-P5wG7dfedKHMtEp5RsaQ80ez3QKBgQDMHPyKSxGKdbrJK6fLoLE8Zkx+jMpDvkGq
-BFQqiv2p9O0hpauPL9BR2dYFbRH4Fx7ahkCdBfXg4inpocSUq4GZarFl0JWOoFCX
-VRGHnL5mUfoaCxbFWSl/0tEkcrfgfZipTew/mvEZiQvJvaHxIifsdGA05JiELwBv
-0vW0dkInSQKBgQDQeCIQ2bdTJblY1mCZBsRXy0W7kNPhT1u8QjIXHE066q+aSvID
-YwTaSoKELWO0Vn6pVV1O50c0cft/TJVfu07SZZWob0EVRfyQdvKWfk9C+RfRgLq2
-udNOpzxlq2o4JvtHbZr4jTfqVfMhDTtYO4fERLPeNtCmqFiPhbVvnagKVQKBgQCF
-Pk7lgEe9GUmL1YG9/fJ1OVqqKgJH4sU+1YCUHROmhQrfsiSiXlYheJCsDh1y1LUB
-di5r0t5FpZ4ys7V+T89UdT/E9TsMVj8F6zR8UKhCZzVbFu4QejoLBXYd0v2SAKtN
-ql6UzvKg9sPJOI+kt+VUCExdevTNJVmlphNbcO+ScQKBgQCObXbo7X+9BfQR3aNu
-GxEx+Ff6vic84KumoIN6YOK1wxPQBLAu/9JHyla/Yc08NllzK1ZWH05EfIWED6F+
-gukdlA2BWII04j3Zz3K2mEhY90qETikwBZducBKoPBFoMUWfGnlOo53Bx7gMXFDF
-BzE4+npPoDHsdl8e554yPHD8bA==
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/create-certs.pl Deleted

@@ -1,129 +0,0 @@
-use strict;
-use warnings;
-use IO::Socket::SSL::Utils;
-use Net::SSLeay;
-
-my $dir = "./";
-my $now = time();
-my $later = $now + 10*365*86400;
-
-Net::SSLeay::SSLeay_add_ssl_algorithms();
-my $sha256 = Net::SSLeay::EVP_get_digestbyname('sha256') or die;
-my $printfp = sub {
-    my ($w,$cert) = @_;
-    print $w.' sha256$'.unpack('H*',Net::SSLeay::X509_digest($cert, $sha256))."\n"
-};
-
-my %time_valid = (not_before => $now, not_after => $later);
-
-my @ca = CERT_create(
-    CA => 1,
-    subject => { CN => 'IO::Socket::SSL Demo CA' },
-    %time_valid,
-);
-save('test-ca.pem',PEM_cert2string($ca0));
-
-my @server = CERT_create(
-    CA => 0,
-    subject => { CN => 'server.local' },
-    purpose => 'server',
-    issuer => \@ca,
-    %time_valid,
-);
-save('server-cert.pem',PEM_cert2string($server0));
-save('server-key.pem',PEM_key2string($server1));
-$printfp->(server => $server0);
-
-@server = CERT_create(
-    CA => 0,
-    subject => { CN => 'server2.local' },
-    purpose => 'server',
-    issuer => \@ca,
-    %time_valid,
-);
-save('server2-cert.pem',PEM_cert2string($server0));
-save('server2-key.pem',PEM_key2string($server1));
-$printfp->(server2 => $server0);
-
-@server = CERT_create(
-    CA => 0,
-    subject => { CN => 'server-ecc.local' },
-    purpose => 'server',
-    issuer => \@ca,
-    key => KEY_create_ec(),
-    %time_valid,
-);
-save('server-ecc-cert.pem',PEM_cert2string($server0));
-save('server-ecc-key.pem',PEM_key2string($server1));
-$printfp->('server-ecc' => $server0);
-
-
-my @client = CERT_create(
-    CA => 0,
-    subject => { CN => 'client.local' },
-    purpose => 'client',
-    issuer => \@ca,
-    %time_valid,
-);
-save('client-cert.pem',PEM_cert2string($client0));
-save('client-key.pem',PEM_key2string($client1));
-$printfp->(client => $client0);
-
-my @swc = CERT_create(
-    CA => 0,
-    subject => { CN => 'server.local' },
-    purpose => 'server',
-    issuer => \@ca,
-    subjectAltNames =>  
-	 DNS => '*.server.local' ,
-	 IP => '127.0.0.1' ,
-	 DNS => 'www*.other.local' ,
-	 DNS => 'smtp.mydomain.local' ,
-	 DNS => 'xn--lwe-sna.idntest.local' 
-    ,
-    %time_valid,
-);
-save('server-wildcard.pem',PEM_cert2string($swc0),PEM_key2string($swc1));
-
-
-my @subca = CERT_create(
-    CA => 1,
-    issuer => \@ca,
-    subject => { CN => 'IO::Socket::SSL Demo Sub CA' },
-    %time_valid,
-);
-save('test-subca.pem',PEM_cert2string($subca0));
-@server = CERT_create(
-    CA => 0,
-    subject => { CN => 'server.local' },
-    purpose => 'server',
-    issuer => \@subca,
-    %time_valid,
-);
-save('sub-server.pem',PEM_cert2string($server0).PEM_key2string($server1));
-
-
-
-my @cap = CERT_create(
-    CA => 1,
-    subject => { CN => 'IO::Socket::SSL::Intercept' },
-    %time_valid,
-);
-save('proxyca.pem',PEM_cert2string($cap0).PEM_key2string($cap1));
-
-sub save {
-    my $file = shift;
-    open(my $fd,'>',$dir.$file) or die $!;
-    print $fd @_;
-}
-
-system(<<CMD);
-cd $dir
-set -x
-openssl x509 -in server-cert.pem -out server-cert.der -outform der
-openssl rsa -in server-key.pem -out server-key.der -outform der
-openssl rsa -in server-key.pem -out server-key.enc -passout pass:bluebell
-openssl rsa -in client-key.pem -out client-key.enc -passout pass:opossum
-openssl pkcs12 -export -in server-cert.pem -inkey server-key.pem -out server.p12 -descert -passout pass:
-openssl pkcs12 -export -in server-cert.pem -inkey server-key.pem -out server_enc.p12 -descert -passout pass:bluebell
-CMD

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/proxyca.pem Deleted

@@ -1,48 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDPjCCAiagAwIBAgIEbhKxVTANBgkqhkiG9w0BAQsFADAlMSMwIQYDVQQDDBpJ
-Tzo6U29ja2V0OjpTU0w6OkludGVyY2VwdDAeFw0yMTA4MTYwODI2NDlaFw0zMTA4
-MTQwODI2NDlaMCUxIzAhBgNVBAMMGklPOjpTb2NrZXQ6OlNTTDo6SW50ZXJjZXB0
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf53vfkt/sNh7HXvfdcb
-ynxHg4Ufy5WJYE7O1qlYA6y9SHp5wwd4Eh+81LDc9hk+c37+tiY8cjp6sLPi76O2
-EeMgTdauWPh4qk2sFic+noIHbTPvMeBiROsyGMbJ5meRsXZsIJHljEDeVqqjmLUx
-cUK+uLA7P1tz9lA+6dJNtEJ4armRSUCm+pL8BMrqPiDYh0M8SyhlBsTUc5sInwnP
-zAEHVo3k6h3o5n0eWtts+0g0xo494pxxoi4ZBKwm04uNRRK0sOnAXD0rrVX1LQaW
-4kUS36VOK5n1T/Sxiw6oXasFsqxOqapJf//iWwPKX6z473O8YbIaQckBOaFk04pI
-FwIDAQABo3YwdDAdBgNVHQ4EFgQUwQesSTGKj0iuQH8Xu3HHstksbIMwHwYDVR0j
-BBgwFoAUwQesSTGKj0iuQH8Xu3HHstksbIMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
-HQ8BAf8EBAMCAoQwEQYJYIZIAYb4QgEBBAQDAgAHMA0GCSqGSIb3DQEBCwUAA4IB
-AQB/tJCdy7/aBVu6r8sv7Eu3VMkABqEg2+WY1xqa1O358rwWKZzjZuOOFXJfbOp5
-6KIaUqkAX3QMfK0eeh8ggwik6E2BCdEEAUzZTRt2oPqD8gXQdhADbkXneLGtKdMJ
-OJQYxx/z/QckUR8iRN6U+CpXlIvdq/n9eii5raCKixwZfpY+sxEEyYUtu/1M/xJ7
-4aWYDSBH4ixOHR675mKLtAYcBzIuXWPSHiCuojqDf+I4yqFemrEKoOvVBmkD0q81
-hJT70UhYVi/E0KkE/z9pcn+tWEZnpw6ynUUpUrGqZPgDD/LQ8P9YsV8rf+Hl+6R6
-ymg3f+Ipz95nM8o1I/9yNeIZ
------END CERTIFICATE-----
------BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDJ/ne9+S3+w2Hs
-de991xvKfEeDhR/LlYlgTs7WqVgDrL1IennDB3gSH7zUsNz2GT5zfv62JjxyOnqw
-s+Lvo7YR4yBN1q5Y+HiqTawWJz6eggdtM+8x4GJE6zIYxsnmZ5GxdmwgkeWMQN5W
-qqOYtTFxQr64sDs/W3P2UD7p0k20QnhquZFJQKb6kvwEyuo+INiHQzxLKGUGxNRz
-mwifCc/MAQdWjeTqHejmfR5a22z7SDTGjj3inHGiLhkErCbTi41FErSw6cBcPSut
-VfUtBpbiRRLfpU4rmfVP9LGLDqhdqwWyrE6pqkl//+JbA8pfrPjvc7xhshpByQE5
-oWTTikgXAgMBAAECggEBAIWo8scsaXkZBGUZrP3SJzuXfSLUJjPqoVqvC0MUD39v
-AFlDYerhuFwV0DfVSIE4NxDpydXx+zGC7MicX+A+ri2r4yZelkOdNwtKFkMaeN8e
-H5ftM6wHVD9SenXWpKbnhYquV+I9aG2kRvuGMnbL/wl5JwbC5pGIDHXCp77FQFG0
-M0pvjRV5pOQYLH59zH/bKLvpinEJ/87mKcDeHPyr3l1nKVqqapO8tKmasvNmvv9T
-HfreuTqouiOnaGhKqBGuAFmG4Ljt83fH0GUwtgkilCePkta17HqXvu2fa7fA1Ggc
-nrp5sHrmWZS8/GYlK1bygSBSKF6VMJ7pCHPBFbXVakECgYEA/3Hq8DApjPO0rcFo
-xurzty7bCWUyD1mSljo5fhAszcCou9f+Al3XBVtMYDvaWHrHqW0atl0b6Zq1SVA/
-0Tc8UwIpEeA1QbDvY9J74age+rmmV+jdl0RrtaPR/L/5zeuhidRTvwz4wY3O144O
-Pg12+SNLuttCQlIH6VQpF3oLv6cCgYEAym7R3fpdj4PDTQH/T9ZfOMBTefJADKLm
-s4oCH0GPq12LYIjYy2H6f5+km7Rhs7ZEp3Xyr0QJDozOIu4ypVNzhUJKnOzJ6M+f
-8+knoDTFPtnoZoKxvE6v0N9NhTrWodbw5dZKnKSZUy0sZUFWlrLG72e8CxuOLdcF
-kBr3xKMKwhECgYBufRystXhTclo1SdIDMD8ofcjaQH4tq4W/GwIhJ+fpOysAzQUe
-iu5lb78SZPElkj3oZ7vFI3LeUT+WrXJdETIziVywUbVXa6uwFqvkyC5WLpTns16d
-fkfEck5yr6riScg+cKukmHzEY40TKWu5pWNPkdfAw/Pd8dNgNjnr4KtSQwKBgGyb
-Qjt+7J1nyutQ7AKQd+wBu4eMgfKFn5Kps3PDf+onuPRk1zNe8L9yDiV/hH+fhXv2
-2upPbTCCOMIi28c5W5weMdu5aqZeZmm9KIZaaYzL6lS9P9BQwyEj/PpC1A5mPD6D
-VuptoNkwPkZg5KzbY8Hj/M5UzVYoq5Jh9ZZpBweRAoGBAI7ywjsgfOnSMyZ0IV90
-3Za6UEV1bLfw8j6Qjn+j9kL2sILLqYYcE4OQVj9rrnpjwkQKy3ETi3kcxcbfyiqb
-hvAObVbNXDzPtvaQJDoloUc0r+8Y9jpg32yx6ylBZlfhSi4gd2R5N0iAAYAweHaB
-FH8O+uATNV5RMkp5cbg2QOhD
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-cert.der Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-cert.pem Deleted

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQjCCAiqgAwIBAgIFAJcODeEwDQYJKoZIhvcNAQELBQAwIjEgMB4GA1UEAwwX
-SU86OlNvY2tldDo6U1NMIERlbW8gQ0EwHhcNMjEwODE2MDgyNjQ5WhcNMzEwODE0
-MDgyNjQ5WjAXMRUwEwYDVQQDDAxzZXJ2ZXIubG9jYWwwggEiMA0GCSqGSIb3DQEB
-AQUAA4IBDwAwggEKAoIBAQDugv6NC8y97dzaoxwccE0TVsWHK9idhlkQXtGxLXIj
-9DvJcn3+c8wAkf1M2soCHWAbltdzu7P5NsejEfuA9eQccPHKYYtnyqoqYpyhCEwt
-swU/y9CJ2/Fu95xLEpGvuiZuL4ow/PJ5Fp85AyTIZZhPbNQ/ogQlWrNd6M4NWmvZ
-f/d0HjH5KPcIF0/eVrYSnwMseG94gOyYuT7pf4FTDVZi7n0YKc64ut+cR4Tu6Unk
-1VYN2mTzKtq6/c03DNBxGNJ7LGNc8ocrCeNzXRQKzdnRZLwuk7DFusIt9M1dU+lB
-z63QsE5QUY8Tz8lktPwLKFlDma7NwFcGOzQpDoO8GozvAgMBAAGjgYkwgYYwHQYD
-VR0OBBYEFI3FHxRhhjBnD4GL5TVJzbbh4HRnMB8GA1UdIwQYMBaAFLnih3fCc4yg
-dSimBeBYvU5gw983MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMBEGCWCG
-SAGG+EIBAQQEAwIGQDATBgNVHSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsF
-AAOCAQEAkXnz0QjXU7A7prqLPWdBCmk6r0at7CvHYcKmuJ0NeCElYstgPDoMnJMt
-d2uaQJ6lU7rIIKGwJF7hhSeZmB4GB3vxJtRZzLgcPo/yupACR6vpZW6gC8gPETvL
-OeyVYTMHTt8F5D6xLKA/z+HWjMLk8k/oMW9TEE0JK5vDTjdqEXPTfZoYLaoE2uxO
-LBuVQgAhLxjASw4pnjV1tmVDaaGIMFLRbCcnIvKB5z1AsmEZWDUEntnBKl3SiSq4
-NgfJo4OXxZGSm8d7qMh9Sl1VZcHwqx3gaWSLRzeemTGtzyYOx1YWTrV9LX7XO4MW
-5bsTo1hTJcz2FaDqY3RI5b82DgfUjw==
------END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-ecc-cert.pem Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-ecc-key.pem Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-key.der Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-key.enc Deleted

@@ -1,27 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpgIBAAKCAQEA7oL+jQvMve3c2qMcHHBNE1bFhyvYnYZZEF7RsS1yI/Q7yXJ9
-/nPMAJH9TNrKAh1gG5bXc7uz+TbHoxH7gPXkHHDxymGLZ8qqKmKcoQhMLbMFP8vQ
-idvxbvecSxKRr7ombi+KMPzyeRafOQMkyGWYT2zUP6IEJVqzXejODVpr2X/3dB4x
-+Sj3CBdP3la2Ep8DLHhveIDsmLk+6X+BUw1WYu59GCnOuLrfnEeE7ulJ5NVWDdpk
-8yrauv3NNwzQcRjSeyxjXPKHKwnjc10UCs3Z0WS8LpOwxbrCLfTNXVPpQc+t0LBO
-UFGPE8/JZLT8CyhZQ5muzcBXBjs0KQ6DvBqM7wIDAQABAoIBAQCVb2NXMa5szSwT
-nCBPvRi9Zh9KSnFkeLkypYXR8XxTBIG0/FPuadTGArHmRipM2uTNRFvm+hKPsP+x
-ruGZ8fWi0CzdtPHn7LVi6vfheNZpx4EhcGxPA4uoD+FPs+mtZP8RCB4YBVNSBJdr
-3AleuTCNis0MtVDNqp841lTLTvzFfs7bmAJbU4PJP5edShx61y70+itObtyGURsy
-qtK8lOFruX+MejO9hBB3ViDgT7OtR8lQEx/aCz9j7FmkGMLTPJb8zMbDJXwSDvoe
-lzTcyz63fMwHlS/Ey6iNjwEgkYzBMHDirA8OLjoQ1pZfxNRqBBh8kBGdBQrnm36W
-PxeBuHUpAoGBAP8FNij9uhAZzNtX0MaVcWdCMGj0/ZKCn5M6XDc7r8YVvej0Cs1M
-+aTFIAHGVXIdAQUMWCDYaTgoJ0mLRmdYcVJMbUN4EZ2QgKgq3mqcKi/lcLnjjuyJ
-/YS77moLbbR6PNrT7htIXAk/zrngi96+t3WS/hnGAj6l/R0pa7W61czFAoGBAO9t
-jE4qbKT551G5ewH0zDznmYQ3/41aQNbvZeQz1c3+4IsGtsR5FFTPuA352GrpYZh5
-aqy22iQCdUT0QAR0/I1V0gl0xBam1Jg5t3gMNmx2YJtQN4oFUIMfS1HoxeJEE+r6
-O+Ha0ZDufbIZwlqsWFWWDqdPQxlWmFdRDLnv1jYjAoGBAOnILklPqDVAYaMmkrap
-oydE7zoYdSjNZFpEourjZZTSs6ENr6VbDnQ1Xc0is4wD+L5W/adGnNalQLbT3bu5
-wVDvzS6PsJ5gLQF9Ix5agPYdgMR4TrqbGXSID9zZEz3i3UzCAcKzB+RWwT13EuIk
-tewrz5NzCPXDlxEXuq0DVSH9AoGBANrhsjevTx1PHOq4fzydl61CKTUXoHeP/+C+
-gM6rmJU2of5XB/T7n9uc/e1A8FlkvAURUrVMgIYU/TIpfPDWJh/rShW8+pqer5Hu
-icyklYh4e/7gybVTAHSuwkPCYk1k4TSayO3EBnvRm3WbWPNdxW+QvBq2OmhKowCI
-JvNAz/szAoGBAI8kIssh7ZvGFzL0l204LeQhm2ux2m1xmNP7wzRUVIRYshEDsNpd
-OJnyX2k8+LzZPRu9OTydPYxF+ZDnRxTic5i3hzaRKF2ONhj1lCRX3k2mgewPFdHb
-ZWThaOsRAa8u+JR4fo+XK8D5DwljCK4n59hYiweZpeAG3NuqG+8NjNKI
------END RSA PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-key.pem Deleted

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEwAIBADANBgkqhkiG9w0BAQEFAASCBKowggSmAgEAAoIBAQDugv6NC8y97dza
-oxwccE0TVsWHK9idhlkQXtGxLXIj9DvJcn3+c8wAkf1M2soCHWAbltdzu7P5Nsej
-EfuA9eQccPHKYYtnyqoqYpyhCEwtswU/y9CJ2/Fu95xLEpGvuiZuL4ow/PJ5Fp85
-AyTIZZhPbNQ/ogQlWrNd6M4NWmvZf/d0HjH5KPcIF0/eVrYSnwMseG94gOyYuT7p
-f4FTDVZi7n0YKc64ut+cR4Tu6Unk1VYN2mTzKtq6/c03DNBxGNJ7LGNc8ocrCeNz
-XRQKzdnRZLwuk7DFusIt9M1dU+lBz63QsE5QUY8Tz8lktPwLKFlDma7NwFcGOzQp
-DoO8GozvAgMBAAECggEBAJVvY1cxrmzNLBOcIE+9GL1mH0pKcWR4uTKlhdHxfFME
-gbT8U+5p1MYCseZGKkza5M1EW+b6Eo+w/7Gu4Znx9aLQLN208efstWLq9+F41mnH
-gSFwbE8Di6gP4U+z6a1k/xEIHhgFU1IEl2vcCV65MI2KzQy1UM2qnzjWVMtO/MV+
-ztuYAltTg8k/l51KHHrXLvT6K05u3IZRGzKq0ryU4Wu5f4x6M72EEHdWIOBPs61H
-yVATH9oLP2PsWaQYwtM8lvzMxsMlfBIO+h6XNNzLPrd8zAeVL8TLqI2PASCRjMEw
-cOKsDw4uOhDWll/E1GoEGHyQEZ0FCuebfpY/F4G4dSkCgYEA/wU2KP26EBnM21fQ
-xpVxZ0IwaPT9koKfkzpcNzuvxhW96PQKzUz5pMUgAcZVch0BBQxYINhpOCgnSYtG
-Z1hxUkxtQ3gRnZCAqCreapwqL+VwueOO7In9hLvuagtttHo82tPuG0hcCT/OueCL
-3r63dZL+GcYCPqX9HSlrtbrVzMUCgYEA722MTipspPnnUbl7AfTMPOeZhDf/jVpA
-1u9l5DPVzf7giwa2xHkUVM+4DfnYaulhmHlqrLbaJAJ1RPRABHT8jVXSCXTEFqbU
-mDm3eAw2bHZgm1A3igVQgx9LUejF4kQT6vo74drRkO59shnCWqxYVZYOp09DGVaY
-V1EMue/WNiMCgYEA6cguSU+oNUBhoyaStqmjJ0TvOhh1KM1kWkSi6uNllNKzoQ2v
-pVsOdDVdzSKzjAP4vlb9p0ac1qVAttPdu7nBUO/NLo+wnmAtAX0jHlqA9h2AxHhO
-upsZdIgP3NkTPeLdTMIBwrMH5FbBPXcS4iS17CvPk3MI9cOXERe6rQNVIf0CgYEA
-2uGyN69PHU8c6rh/PJ2XrUIpNRegd4//4L6AzquYlTah/lcH9Puf25z97UDwWWS8
-BRFStUyAhhT9Mil88NYmH+tKFbz6mp6vke6JzKSViHh7/uDJtVMAdK7CQ8JiTWTh
-NJrI7cQGe9GbdZtY813Fb5C8GrY6aEqjAIgm80DP+zMCgYEAjyQiyyHtm8YXMvSX
-bTgt5CGba7HabXGY0/vDNFRUhFiyEQOw2l04mfJfaTz4vNk9G705PJ09jEX5kOdH
-FOJzmLeHNpEoXY42GPWUJFfeTaaB7A8V0dtlZOFo6xEBry74lHh+j5crwPkPCWMI
-rifn2FiLB5ml4Abc26ob7w2M0og=
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-wildcard.pem Deleted

@@ -1,50 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDpDCCAoygAwIBAgIEU2/kRTANBgkqhkiG9w0BAQsFADAiMSAwHgYDVQQDDBdJ
-Tzo6U29ja2V0OjpTU0wgRGVtbyBDQTAeFw0yMTA4MTYwODI2NDlaFw0zMTA4MTQw
-ODI2NDlaMBcxFTATBgNVBAMMDHNlcnZlci5sb2NhbDCCASIwDQYJKoZIhvcNAQEB
-BQADggEPADCCAQoCggEBAOWgEMbF77Jgmz9h9WHA76RGmeyZ6g34EfwdP1mGyBgT
-29QxGa1bs3N9j874lsvgpCc4HfL0zzOsa/0SEE8BM5a71QUbcDqMoKm3H9UAqmK9
-YoKaxotvqmMkXYl+d3qkF1H4zDx8ZMLFRX9o3gC2Ot043X/djiaa8BP7YdLu4Q8G
-VmSnFcpNehFkJAmt/cV3ehrJqU9oKzyDHiWB8rCxY17TU8BIgTTyQwlgnZ2oYpLU
-zuSJPem9RRQhaPnCuuqwaWG2JqDppwRuyqUictZcwUcdazpxI0YyGP0G8x3pkqTb
-Vi+BA5UgMG/GjuYcP3sx4Dxb7cmnF0kCqe7eclR3qrECAwEAAaOB7DCB6TAdBgNV
-HQ4EFgQU9T053wvf56DXyotfQv+lhyR/SR4wHwYDVR0jBBgwFoAUueKHd8JzjKB1
-KKYF4Fi9TmDD3zcwYQYDVR0RBFowWIIOKi5zZXJ2ZXIubG9jYWyHBH8AAAGCEHd3
-dyoub3RoZXIubG9jYWyCE3NtdHAubXlkb21haW4ubG9jYWyCGXhuLS1sd2Utc25h
-LmlkbnRlc3QubG9jYWwwDAYDVR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCBaAwEQYJ
-YIZIAYb4QgEBBAQDAgZAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEB
-CwUAA4IBAQCpy5NfTKJ3IYlIj+5wnJCRJQsizHUPnNnM00qlkGnDjtoJGmq4p/kX
-uJfMZqrbHYz8THz+qCGf4EeW36Bu0V5OQm2mIpJ1ufHeIMkZVOyxSzG6blZtdHRE
-SgFC1TnTA9bw9e8dlr9IuTeIfxbyq7cfyLdh/ecIlSoaQ00lPY2Hxp1IOjMIbvfT
-kb3T/WiPLs+/u8mcqABbSiFX/XHaeqUs7kkE5W3LYwAcyaH+3xVxrBkw8IBRR9yY
-+/orXxElNACATVfg+SxUSWsT7Nb1ZEkSP9njnhEYb02JbrbF+ZWTInNXS+7WPdbz
-NuvgXlercSqSM2xeaqkQQ//bjbTw4+7x
------END CERTIFICATE-----
------BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDloBDGxe+yYJs/
-YfVhwO+kRpnsmeoN+BH8HT9ZhsgYE9vUMRmtW7NzfY/O+JbL4KQnOB3y9M8zrGv9
-EhBPATOWu9UFG3A6jKCptx/VAKpivWKCmsaLb6pjJF2Jfnd6pBdR+Mw8fGTCxUV/
-aN4AtjrdON1/3Y4mmvAT+2HS7uEPBlZkpxXKTXoRZCQJrf3Fd3oayalPaCs8gx4l
-gfKwsWNe01PASIE08kMJYJ2dqGKS1M7kiT3pvUUUIWj5wrrqsGlhtiag6acEbsql
-InLWXMFHHWs6cSNGMhj9BvMd6ZKk21YvgQOVIDBvxo7mHD97MeA8W+3JpxdJAqnu
-3nJUd6qxAgMBAAECggEAJMSyqwF61jc95LJM1nBMbyOW9hnXLpFwX8xXHoDEfYaA
-hsOt9uJeI7oRUvTfQJoh7t2/fe3RV9beG9HOprfsiNBe1ciE+fsWptZZ1IOcxN7K
-bVtXO3CP+fwStjd37j1kNo3+Nhk9ESsBa9tg4QBNAKtgXF8fqfLZSnnQOjRh+UOe
-3U4yCvg33+UuAjqOquhMK6fb0uYDkaOPE1oeN8c721aSzl+zHXyO/fcjHQyrAVRK
-DPpzKc90Qf3SQzlGDibLhcm9iiyAxdw7hjr4SAyuqbaWwSwihkbU9wUj3b7W1rsV
-bdJ+GH8fusPM9pVwkBqavszUAfTxDYDqy0Zd9mYxuQKBgQD2vr0JqRiBdGsCfdnY
-0DukW5ZWAcWRfrJ+eSRdgMHF5jn9fznI0BQkXg4q3LJr2U2iiVrkfYsC/+mOqyPO
-puWe4UcXiitIBNCBBY7DFxrulK31HCihapni1lv+8f4HKotxTXthvbdv4jHd0lso
-Yb/fOawEGV7gXmn4BX0IFik5BwKBgQDuPPEKS8tFmcavS4KLxWVtJIlBxO4doPPh
-nWghwM5l7zJKFRXnpHLeQQGHSim6eCq7U/8qh4Dn1NabyCreniFNomjUiw60a6nE
-qO63PGEg8jjOMI7FneQlnWtoaoAL86d3xE+ZeWkKFPvjhDRzOcO0xD8j064pGRgH
-b3muoMKohwKBgQCOlkrHemAe7xenqPJqyGqu3/5QVVXGbmDXlUnefrl7kz+PriXG
-VfhNy8yEGGVCzaB/fMB5qdLbOOfO+jcHBItM9QIQKFg6lg2ngX6uXnvBw0mDi3Iv
-VVr4Ksee3Fjf60YJg6z5HpkSnrQSa60h+NrYNIujEsYxAl5aZVGLisLnoQKBgH3M
-dENJjoasErwRlVeU3l/pgQjXohzHFsC1y3y3QMWWrulrhOuSbI1rqhD0WmB6f6X3
-Tq/4aVsBimksI2b1/QPvlIdW/mbKyxRrV9It8ePhw5ktDtbO7t/l5gd25TJqcK3P
-XXDfKVYHipKzBrcpc2wKjISwjDBrbcLPXGOXw/IVAoGBAJb0t/E7O8MoUb74in9z
-H+XH9u8wsfd5Av1t/HKSFT26psj9jRNUrG1qhE/Nq7xD9CWqQz/2b5hv3WsyBrx9
-Gi96HjkVa8b5q56yXSrF1nnaII6omP10A1ytReM//N+D9tJCg2zRtGdVwDReBo9+
-c4tEO980MgyYSWrlbyZO0EnM
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server.p12 Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server2-cert.pem Deleted

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQjCCAiqgAwIBAgIEItYq9TANBgkqhkiG9w0BAQsFADAiMSAwHgYDVQQDDBdJ
-Tzo6U29ja2V0OjpTU0wgRGVtbyBDQTAeFw0yMTA4MTYwODI2NDlaFw0zMTA4MTQw
-ODI2NDlaMBgxFjAUBgNVBAMMDXNlcnZlcjIubG9jYWwwggEiMA0GCSqGSIb3DQEB
-AQUAA4IBDwAwggEKAoIBAQC6Zh5dqdgzcdrzpg0W6bz7N86oBak1KqH8dc888msM
-Lw39Jv0kXABDPO68hSFPKF1Fa8aIeagNU37SIYUekTgs66hxJBVMYS2KUDWe/52v
-bFKY5LuVEgkP/H2RclcFX7h9OhiUyB4z6ZlKiusXELepZDw0+EWacREhr58aTjcu
-Jjzz67jnwUKlMcy16K09XByxjYdkdZaCRMfWb8PERp036bkygp2TZxJNxP7RvvzM
-4PN8YxKFvZ+pqbyZ+bUFeDK7IuWV4Mfo3lN1KnS7xdsBoHqgJJyoAMDftXQDflNc
-f1vsKiBeaBo89Hlb3PrvfZ2Rs+FiD2ygpNeyk8zmD5CTAgMBAAGjgYkwgYYwHQYD
-VR0OBBYEFAeROxKjSDH+69hGnBP5TeUlIDaeMB8GA1UdIwQYMBaAFLnih3fCc4yg
-dSimBeBYvU5gw983MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMBEGCWCG
-SAGG+EIBAQQEAwIGQDATBgNVHSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsF
-AAOCAQEACTR/WTdjWZu/yBcoTcyPMWUpUjKcb+mN59GSJashh0Np5CjXSwlWBceL
-Kcm4AJ8hG/iYiKdQRABknBzK+xApz25TqKSB/eeqqjer0llLt4Oapd4SW94h7HhO
-LsNx6wk2+/BK/I0mypjlilwKCk/vXdVeAkPkxeUDIhTGgNyWkRbLzdi+n/enisJo
-uOwuZLtwM1+WoRw+9TlPZLngRQK4bl1xf+toAiYhxQGId2No+NmgevHLkCMsGyhE
-/TqfpSVJNPwk5pkpwyIuDf3ZrrNeZPmEf0Rfy/RrBpZTZneuNxnd4z9Sdt6EL9Wx
-M/9opmYGFrvWJbjoi4QR4rGyk2INag==
------END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server2-key.pem Deleted

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQC6Zh5dqdgzcdrz
-pg0W6bz7N86oBak1KqH8dc888msMLw39Jv0kXABDPO68hSFPKF1Fa8aIeagNU37S
-IYUekTgs66hxJBVMYS2KUDWe/52vbFKY5LuVEgkP/H2RclcFX7h9OhiUyB4z6ZlK
-iusXELepZDw0+EWacREhr58aTjcuJjzz67jnwUKlMcy16K09XByxjYdkdZaCRMfW
-b8PERp036bkygp2TZxJNxP7RvvzM4PN8YxKFvZ+pqbyZ+bUFeDK7IuWV4Mfo3lN1
-KnS7xdsBoHqgJJyoAMDftXQDflNcf1vsKiBeaBo89Hlb3PrvfZ2Rs+FiD2ygpNey
-k8zmD5CTAgMBAAECggEAf5Er7wYyROMC6gUWqDvHbla/RBa7uvs2aUVnU1rFEE2T
-0VFBpgSg2WN2L+cc6MPDMaOU+AnqjVQ7UyxFoqnYPEX7vZLoUKGhPSuvxuVB0bDc
-xm6kQl1ZfmtatJQAIllkNa/w6sIaiYSxuGZihiKWz4MeAVJ4sD35b4h15tboxNeS
-2hcq1josrbwTM1mPt7mccAuNTKfrMaqsIvcB1Qr0jZzWzj4pQXGHcqv6fCTE7gGc
-fMukGEmDOa8LOWxPjjEUV6Q6hCkbznzJhV7JqWdDwuNH/pxs7TzH1G4cGpVrEO+J
-6XJyBFa3CnvtR79tvHdFKh8ITLFkog66zkFOhMk1oQKBgQDqWK7c17JxYa0cmjhL
-LBU7qJrrj8fVkHRPrbZqgnsukIPW5yICg9abmZnC63yHKZ42qdv6cAE6Bwm5LddZ
-CkfgoiAiKZXUHsMoj1ExqeruTBwH/1dljgB1ZiJd8q/4Dv+MiLJ1pEV5Rem4wNo8
-M2X+AvG8assrl2v4u2lQr9OtnQKBgQDLn0RpSP3iItfmeKDRYeJgq++Krwv/21ac
-p+sdauh8jfTqYbkZotoKsNyZQNVBIl4Bh2QuUoZWOqoH5QCWUnGf7FnN5mqBIuQf
-coeCz9Lb2QZE6Q7m0c0IsDhU0riLQah6YmpKjGyUrN8CnFqLEdDLFnZsllFrdV/i
-M6qhEkb37wKBgQCdBR7lSoF+Bvx/FbZyZ+8yMh7bh1NWfZvxZ2u6ogL3iE1OSUA4
-fy3kxF6KhE7EIdaouddzTmkEAIM7WMPaHVFb6kWtnj+OCa6qFp1IsZmAYe7GTQi6
-OxODlhOg72OIykPgXhd1S8RhJb8c09tmSuoj8MUYglXvt13ZI3nFXopu4QKBgQCW
-s3F2WsdMLm2L7YtYbBGXaqkHAzbmTfd0SfMA+rbGOGojbeAI0TZ+4xbhddJfOohI
-qWPDxOAXwaNF5H7iwnHF4q80bGw21xPvElyovBdbDuxM5BBbVLtiyslmPe7HYfjH
-Wz8/nV5fSvJihEWe17ioFh/fjgEEfwJP791BCL3tkQKBgQCoTiHiOrjqJ+FVVe+P
-Q/or5bAxM7dqGOsO/PuB7hlAt1PnUAREmpvc/9JVKiYbqXfZrvAshLEdyXLfY4lZ
-a8rYbh14qryMxHgw5zG2wnQIH6RCl5FlzLhtHmsfqCIwPL+T/S8OwISmO/ZmIbIp
-hxj4B/lWzb6853BwSaWkggr2kg==
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server_enc.p12 Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/sub-server.pem Deleted

@@ -1,48 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDRTCCAi2gAwIBAgIEcocevTANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtJ
-Tzo6U29ja2V0OjpTU0wgRGVtbyBTdWIgQ0EwHhcNMjEwODE2MDgyNjQ5WhcNMzEw
-ODE0MDgyNjQ5WjAXMRUwEwYDVQQDDAxzZXJ2ZXIubG9jYWwwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQDwT9gcSLR3BElcfUwh2gAiz3npRFPveiNw/27N
-ol1HOxR4bkm2nRh3lo8CLJ8kO05bnogiKIntjyiV2M5E9ArpKAM4qRJFQIih7wzn
-d5vkbfL9fOaR9fWRX6mMmRnQS39fYx47xgZewqx1YyVMSIhYOCOn2RZ6BWt9ajM6
-6MQVtOSnzYFOoFpRXoaxWhT7bZNHuvRzA9NJVa9p3EemcTFR6wx5bgWzKrKiJGEx
-Aw73roNA8XwcO9mgMUXD2du/+gQefYHF7aBC2zhFg1jne3gtn0l9fZVPEHAkqVRr
-VWFEPB7HfIP1Ip8utg3OiVASeOQ9h4EVBD9UJ8WtueMlZCb3AgMBAAGjgYkwgYYw
-HQYDVR0OBBYEFJzWRIBp9tSSbpZ1h7P5e3u6207hMB8GA1UdIwQYMBaAFPfXq6gK
-NLs5uOprtbzW2gaCSq/KMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMBEG
-CWCGSAGG+EIBAQQEAwIGQDATBgNVHSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0B
-AQsFAAOCAQEAXTpdg83URmAgZ/OGjRlRBUpDC1StVJoxQG0oFxcd66u5nL5DDx/h
-oN66gTOkpiP02R8aGAdoSLI/I5/VKH6LN70TVrPk1+jrGvc3OvKcdNne+2K0S1NH
-DRrn7J+HmNtJmKRZzV4rHE1vQW1Ne9+tjYV0bnR+lY7F6y/CHoqE+/SEbDn8ZxIl
-GrUjcxbdaatdo9sUHgrqCpmpuu6wUuYtRJTV+/Hx9FknTC8fPBSkLsvOUXuRzTZW
-03tK2VMBp9WJMHGAVzGEqea5+JtPysl6LSjz/6zCwQvQJJVEVXxIT1KQMowKXYwk
-9N811/UAlMpoIjyYoTkCkyTTDmEUMdR2PQ==
------END CERTIFICATE-----
------BEGIN PRIVATE KEY-----
-MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQDwT9gcSLR3BElc
-fUwh2gAiz3npRFPveiNw/27Nol1HOxR4bkm2nRh3lo8CLJ8kO05bnogiKIntjyiV
-2M5E9ArpKAM4qRJFQIih7wznd5vkbfL9fOaR9fWRX6mMmRnQS39fYx47xgZewqx1
-YyVMSIhYOCOn2RZ6BWt9ajM66MQVtOSnzYFOoFpRXoaxWhT7bZNHuvRzA9NJVa9p
-3EemcTFR6wx5bgWzKrKiJGExAw73roNA8XwcO9mgMUXD2du/+gQefYHF7aBC2zhF
-g1jne3gtn0l9fZVPEHAkqVRrVWFEPB7HfIP1Ip8utg3OiVASeOQ9h4EVBD9UJ8Wt
-ueMlZCb3AgMBAAECggEAcWv+ADuAkbwANBsfV8rgzY1HaQXK5/ipyaeF0KCVjg0g
-eEb1m69B4Q+6p7gP1LX5Id0NO7IOh4VODoupr3nPvIQaISALc4wl8Og3GvilJ4eN
-bH8LBFEmelrAV4/bUyiPEaJinqu0Tf1sEGufKwYA9EJq8cnQhf8Q4LzDOUarZeJ0
-3h2qySL1kncd7OPwLX5ehsJaiX+F2d9GUlq8AYZzk7/adwVwVDNKNPPV8XbwI0Kd
-qT5MzjgnHSb6srvolB9feKZlD3aOsFoE+qQyBgkWMd4HlZ+Wph8MnujAa8EFHfQ1
-Smvo3EHntyFcTUO7zRL1r8bIUuqByLv0Godd0NfcgQKBgQD/S7GbRPs4ZlSlo5CW
-agd1QFByY9xlNex55agYnTrAS2ktylc6DrHs+7BQIZqDHNyWvavf/Tf+kWn9Sgl6
-c+e1teOWBwp+M/8uW9D7+tSJJnq9cVFwB/+DUsoY94U5U7NYMyiCd7ogET8A2/r5
-AzcO+85AUPVcEzbWzxweWyefcQKBgQDw+ZFhXP0aU0e3Pgnf4msmKdZ8RF6fBsFu
-k2PmxBHAjudzTRD5cjBJG4/AX3LcnMqzCzvkpk6HfX83DGn1ktmiVEriqNexrQ/W
-Ow8NFxEZYLCJGqVoEa/fOwjqtJZhe/6AvU1TF44BLPL/+1QZi0c9SF+0FtR8I2Wv
-4jIszcPI5wKBgDZQbVXiZCxIoSOoW9+UaUfJyhO8KSyjP09jy9KIyPIWWScz0ED6
-1WHc3lL+Azh30HqFmeaKofoYB9uqf7+8nwRq0SOfFd1pxJWhVSH26HbRZ/WcAT57
-hSH0YCjVqFNc+l/+alTvkfq2kJfnNUr7IyCd8/B9COZw9A7Ze1r9+70RAoGAXlbG
-BKD78ady5xkhkoW4vwsYDjRR+t4RMjH/pWNTM9h+YhRktdNvdd+VapGzjQzRCkE2
-pHA7RC3sdOemP97K1xM68ft53fRLw+oBHXXPWukQk8xbvx9VhAY/mmsyiF2bqFj0
-Abix/mHTjEWfihSNwj8oQH/DlgnhkHb0f7fakzcCgYAH622AVAxVv6b/ErtRVL+K
-pqLGLMyiVTY3XhVJQKc4EwB8zj/WEX3uucXoo5NIncSZABdFwKdzHBcXmfk8vK/U
-FL15J4Xd4aqh1rlA8nVgsXf60BeUvztjFGw+4bbc73RPZ36aWuTqW8BKttB5EPFz
-5AanWoJD6x6cWuiTse4Cig==
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/test-ca.pem Deleted

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDOTCCAiGgAwIBAgIFALYEyrwwDQYJKoZIhvcNAQELBQAwIjEgMB4GA1UEAwwX
-SU86OlNvY2tldDo6U1NMIERlbW8gQ0EwHhcNMjEwODE2MDgyNjQ5WhcNMzEwODE0
-MDgyNjQ5WjAiMSAwHgYDVQQDDBdJTzo6U29ja2V0OjpTU0wgRGVtbyBDQTCCASIw
-DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTt4hAFUSlFXx/evCMjcZJfqgvH
-kDwdr2HEC2yC+uYUluHVyn2NRSmTAuQKQuA2lCrF5F5kYTM8rzguA1ME1yJgI+ea
-ovE76evpvNxrbmLrSXBq9uVWbvc9p37VeP26zRCAYzTpeeVoSfgbDtk5iW7tuMxN
-aVN1hYubabQn+oxpJoIxXepFHz669dzOCT+m2WMHD1Q6ZcEJmvfgenpDmrTCxb+I
-1Yq8NWldvP3usZQRZOvFtQzSm97JnrVLJY57CZ6l18AC+gSHeLb+i9qWgDzLK3XX
-Qp01aQFEdcgoaEBgYQwPAosgRCw5j4YD7Wh23qHBKyh1GV8T1jBlY5/Iz98CAwEA
-AaN2MHQwHQYDVR0OBBYEFLnih3fCc4ygdSimBeBYvU5gw983MB8GA1UdIwQYMBaA
-FLnih3fCc4ygdSimBeBYvU5gw983MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
-BAQDAgKEMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG9w0BAQsFAAOCAQEAazNo
-WaEvH/sbeJuLDR0WL62DDVvU2S11pbvtGu4cnvhpZC+OVALNjpoGUgAiaUl3wvAL
-yik3VQmzQbz6f27AiFQ3F97y3vX82HzMLods6xguEjngBZV7ivn3N4NKk3i2lVz+
-sB4LouPsPhSYOPbBWyHXdoHJE87vNPQIVbYFts7ooXi4CuIaePZOoGIth/8tQOsQ
-FwUEnKw49Fmi4HMbPcmK1LTbVUxm2KnrIqIu14e/9CzoKDH913/dkh8JcWhpqNzK
-T5vpccNYmxJph+VwvAJBv58hRgq9eU8dMbjYxX9Cvl/+e1HHBLCuRKVTzIMjEqoX
-VYJJeQdbYVNq4NS+Ew==
------END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/test-subca.pem Deleted

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDPTCCAiWgAwIBAgIFANQ8y7MwDQYJKoZIhvcNAQELBQAwIjEgMB4GA1UEAwwX
-SU86OlNvY2tldDo6U1NMIERlbW8gQ0EwHhcNMjEwODE2MDgyNjQ5WhcNMzEwODE0
-MDgyNjQ5WjAmMSQwIgYDVQQDDBtJTzo6U29ja2V0OjpTU0wgRGVtbyBTdWIgQ0Ew
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70B5J/FjGev1QXyVZGMZS
-os9IbqVVZP6YcxGGn+JV7DmagX+gsPTlEXnsTgYBfzLeHXZr9SakjIzHZEbqo30e
-hUWGYLrnPZtkMvTdVW7lMb6yipkIhk00C4LrJMDqGFhj3jspM1RPZwnZNmvbHLJ/
-YxjXJS3aBxL6OMbjanes4Y+Ee7v5AghRvkL9u/eiKsN8a2Q66AmGKc7PCS1bRi/Q
-3wAUIoggoeJPcmuLuguQKKPlq80IFNYAFDig1w0MxJVExbqdqw/OH/nSHKdKOO3Y
-ydRFaalOPOPh4Ikt0+/anuspSExIWa16hocH5ceFBIB/7SgRXO0LLTagfSAM20HH
-AgMBAAGjdjB0MB0GA1UdDgQWBBT316uoCjS7Objqa7W81toGgkqvyjAfBgNVHSME
-GDAWgBS54od3wnOMoHUopgXgWL1OYMPfNzAPBgNVHRMBAf8EBTADAQH/MA4GA1Ud
-DwEB/wQEAwIChDARBglghkgBhvhCAQEEBAMCAAcwDQYJKoZIhvcNAQELBQADggEB
-AFkhdJ4RxS2Gadi/bKqB7EA0Cxaqh+14iKmy0MbU35yjabkLpiryGGj9Y3DWPatE
-wy8BF1UTKyEAYr6OXlOmTMI40lBqnrxbo7ulIImQpCR8zqVXZhYVJ/d2qmFh9Rw+
-LUqtK0RTZ1YceXmhrotCIdRpzYnd2o3B6OS02Up4nuV11gO9YHXVNv0mayUpgCeE
-tah9u+YkOP9yvQL/SyMvMBPc+FougRNkNJTMS7aIvagk3PoH8cIp4OjuRIVhK5BE
-sSXbnbvqlflqb5WbKabsVyYrmKFnZQ0lVYI1a4wd29cra7wOt0VbkN3spWT74pBi
-vp3FjmT2DDqdvUDJNHd3haE=
------END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/Changes -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/Changes Changed

@@ -1,3 +1,42 @@
+2.081 2023/01/25
+- new function set_msg_callback for user defined callback on each SSL message
+- showcase function in example/ssl_client.pl and example/ssl_server.pl for
+  computing JA3S/JA3 fingerprints
+- fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)
+2.080 2023/01/18
+- move certs into t/ so that distributions like CentOS don't install the
+  test certificates as part of the documentation any longer.
+2.079 2023/01/16
+- properly extract IPv6 address for verification from PeerAddr if not explicitly
+  given as SSL_verifycn_name.
+  https://github.com/noxxi/p5-io-socket-ssl/issues/123
+2.078 2022/12/11
+- revert decision from 2014 to not verify hostname by default if hostname is
+  IP address but no explicit verification scheme given
+  https://github.com/noxxi/p5-io-socket-ssl/issues/121
+2.077 2022/11/21
+- fix memory leak in session cache, thanks to genuaboro
+  https://github.com/noxxi/p5-io-socket-ssl/pull/118
+- more race conditions in tests fixed thanks to jddurand
+  https://github.com/noxxi/p5-io-socket-ssl/issues/97
+2.076 2022/11/12
+- added curl like tracing based on contribution from jddurand
+  https://github.com/noxxi/p5-io-socket-ssl/pull/117
+- fixed race condition in t/sni_verify.t based on analysis from jddurand
+  https://github.com/noxxi/p5-io-socket-ssl/issues/97
+2.075
+- treat SSL_write returning 0 same as previously -1, as suggested by both
+  OpenSSL and LibreSSL documentation
+- propagate error from SSL_shutdown, but if the shutdown is caused by an outer
+  SSL error keep the original error
+- small tests fixes
+2.074
+- add SSL_ciphersuites option for TLS 1.3 ciphers
+- no longer use own default for ciphers, instead use system default but disable
+  some weak ciphers which might still be enabled on older systems
+2.073
+- fix behavior and tests for openssl 3.0.1
+- fix #110 - prevent internal error warning in some cases
 2.072
 - add PEM_certs2file and PEM_file2certs in IO::Socket::SSL::Utils based
   on idea by rovo89 in #101

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/MANIFEST -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/MANIFEST Changed

@@ -1,24 +1,4 @@
 BUGS
-certs/client-cert.pem
-certs/client-key.enc
-certs/client-key.pem
-certs/create-certs.pl
-certs/proxyca.pem
-certs/server2-cert.pem
-certs/server2-key.pem
-certs/server-cert.der
-certs/server-cert.pem
-certs/server-ecc-cert.pem
-certs/server-ecc-key.pem
-certs/server_enc.p12
-certs/server-key.der
-certs/server-key.enc
-certs/server-key.pem
-certs/server.p12
-certs/server-wildcard.pem
-certs/sub-server.pem
-certs/test-ca.pem
-certs/test-subca.pem
 Changes
 docs/debugging.txt
 example/async_https_server.pl
@@ -42,6 +22,26 @@
 t/auto_verify_hostname.t
 t/cert_formats.t
 t/cert_no_file.t
+t/certs/client-cert.pem
+t/certs/client-key.enc
+t/certs/client-key.pem
+t/certs/create-certs.pl
+t/certs/proxyca.pem
+t/certs/server2-cert.pem
+t/certs/server2-key.pem
+t/certs/server-cert.der
+t/certs/server-cert.pem
+t/certs/server-ecc-cert.pem
+t/certs/server-ecc-key.pem
+t/certs/server_enc.p12
+t/certs/server-key.der
+t/certs/server-key.enc
+t/certs/server-key.pem
+t/certs/server.p12
+t/certs/server-wildcard.pem
+t/certs/sub-server.pem
+t/certs/test-ca.pem
+t/certs/test-subca.pem
 t/compatibility.t
 t/connectSSL-timeout.t
 t/core.t

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/META.json -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/META.json Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/META.yml -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/META.yml Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/example/ssl_client.pl -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/example/ssl_client.pl Changed

@@ -5,6 +5,7 @@
 use warnings;
 use IO::Socket::SSL;
 use Getopt::Long qw(:config posix_default bundling);
+use Digest::MD5 'md5_hex';
 
 my ($cert_file,$key_file,$key_pass,$ca,$name,$no_verify);
 GetOptions(
@@ -49,9 +50,48 @@
 	SSL_cert_file => $cert_file,
 	SSL_key_file  => $key_file,
 	defined($key_pass) ? ( SSL_passwd_cb => sub { $key_pass } ):(),
-    ):()
+    ):(),
+    SSL_startHandshake => 0,
 ) or die "failed to connect to $addr: $!,$SSL_ERROR";
 
+my $ja3s;
+$cl->set_msg_callback(\&msgcb, \$ja3s);
+$cl->connect_SSL() or die "failed SSL handshake: $SSL_ERROR";
+
 warn "new SSL connection with cipher=".$cl->get_cipher." version=".$cl->get_sslversion." certificate:\n".
     "\tsubject=".$cl->peer_certificate('subject')."\n".
-    "\tissuer=".$cl->peer_certificate('issuer')."\n"
+    "\tissuer=".$cl->peer_certificate('issuer')."\n".
+    "\tja3s=".md5_hex($ja3s)." $ja3s\n";
+
+
+sub msgcb {
+    my ($self, $direction, $ssl_ver, $content_type, $buf, $len, $ssl, $ja3s_r) = @_;
+    $content_type == 22 or return;  # TLS handshake
+    #  1 byte: msg type
+    #  3 byte: length
+    (my $msg_type, $buf) = unpack('c x3 a*', $buf);
+    if ($msg_type == 2) {  # Server Hello
+	$self->set_msg_callback(undef);  # no need to look further
+
+	#  2 byte: protocol version
+	# 32 byte: random
+	# 1/...  : session id
+	#  2 byte: cipher suite
+	#  1 byte: compression method
+	# 2/...  : extensions
+	my ($ver, $cipher, $ext) = unpack("n x32 c/x n x n/a", $buf);
+
+	my @ext;
+	while (length($ext)>2) {
+	    # 2 byte: extension type
+	    # 2|... : extension data
+	    (my $ext_type, $ext) = unpack("n n/x a*", $ext);
+	    push @ext, $ext_type;
+	}
+	$$ja3s_r = join(",",
+	    $ver,
+	    $cipher,
+	    join("-", @ext)
+	);
+    }
+}

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/example/ssl_server.pl -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/example/ssl_server.pl Changed

@@ -5,8 +5,9 @@
 use warnings;
 use IO::Socket::SSL;
 use Getopt::Long qw(:config posix_default bundling);
+use Digest::MD5 'md5_hex';
 
-my ($cert_file,$key_file,$key_pass,$ca);
+my ($cert_file,$key_file,$key_pass,$ca,$http);
 GetOptions(
     'd|debug:i' => \$IO::Socket::SSL::DEBUG,
     'h|help'    => sub { usage() },
@@ -14,6 +15,7 @@
     'K|key=s'   => \$key_file,
     'P|pass=s'  => \$key_pass,
     'ca=s'      => \$ca,
+    'http'      => \$http,
 ) or usage("bad option");
 
 sub usage {
@@ -29,6 +31,7 @@
   -P|--pass  passphrase   passphrase for private key, default none
   --ca dir|file           request a client certificate and use given dir/file as 
                           trusted CA store to verify it
+  --http                  work as tiny HTTP server
 USAGE
     exit(2);
 }
@@ -38,11 +41,10 @@
 $cert_file or usage("no certificate given");
 $key_file ||= $cert_file;
 
-my $ioclass = IO::Socket::SSL->can_ipv6 || 'IO::Socket::INET';
-my $server = $ioclass->new(
+my $server = IO::Socket::IP->new(
     Listen => 5,
     LocalAddr => $addr,
-    Reuse => 1,
+    ReuseAddr => 1,
 ) or die "failed to create SSL server at $addr: $!";
 
 my $ctx = IO::Socket::SSL::SSL_Context->new(
@@ -63,18 +65,98 @@
 	next;
     };
 
-    IO::Socket::SSL->start_SSL($cl, SSL_server => 1, SSL_reuse_ctx => $ctx) or do {
+    IO::Socket::SSL->start_SSL($cl,
+	SSL_server => 1,
+	SSL_reuse_ctx => $ctx,
+	SSL_startHandshake => 0
+    ) or do {
 	warn "ssl handshake failed: $SSL_ERROR\n";
 	next;
     };
 
+    my $ja3;
+    $cl->set_msg_callback(\&msgcb, \$ja3);
+    $cl->accept_SSL() or do {
+	warn "failed SSL handshake: $SSL_ERROR\n";
+	next;
+    };
+
+    my $info = "cipher=".$cl->get_cipher
+	. " version=".$cl->get_sslversion
+	. " ja3=".md5_hex($ja3)." $ja3";
+
     if ( $cl->peer_certificate ) {
 	warn "new SSL connection with client certificate\n".
 	    "\tsubject=".$cl->peer_certificate('subject')."\n".
-	    "\tissuer=".$cl->peer_certificate('issuer')."\n"
+	    "\tissuer=".$cl->peer_certificate('issuer')."\n".
+	    $info."\n";
     } else {
-	warn "new SSL connection without client certificate\n"
+	warn "new SSL connection without client certificate\n".
+	    $info."\n";
     }
 
-    print $cl "connected with cipher=".$cl->get_cipher." version=".$cl->get_sslversion."\n";
+    if ($http) {
+	sysread($cl, my $buf, 8192);
+	$buf =~s{\n\r?\n.*}{\n}s;
+	$info =~s{\b\w+=}{\n$&}mg;
+	$info .= "\n\n-------\n\n$buf";
+	print $cl "HTTP/1.0 200 ok\r\n".
+	    "Content-type: text/plain\r\n".
+	    "Content-length: ".length($info)."\r\n".
+	    "\r\n".
+	    $info;
+    } else {
+	print $cl "connect with $info\n";
+    }
+}
+
+
+sub msgcb {
+    my ($self, $direction, $ssl_ver, $content_type, $buf, $len, $ssl, $ja3_r) = @_;
+    $content_type == 22 or return;  # TLS handshake
+    #  1 byte: msg type
+    #  3 byte: length
+    (my $msg_type, $buf) = unpack('c x3 a*', $buf);
+    if ($msg_type == 1)  {      # Client Hello
+	$self->set_msg_callback(undef);  # no need to look further
+
+	my %grease = map { $_ =>1 } (
+	    0x0a0a, 0x1a1a, 0x2a2a, 0x3a3a, 0x4a4a, 0x5a5a, 0x6a6a, 0x7a7a,
+	    0x8a8a, 0x9a9a, 0xaaaa, 0xbaba, 0xcaca, 0xdada, 0xeaea, 0xfafa,
+	);
+
+	#  2 byte: protocol version
+	# 32 byte: random
+	# 1/..   : session id
+	# 2/...  : cipher suites
+	# 1/...  : compression methods
+	# 2/...  : extensions
+	my ($ver, $ciphers, $ext) = unpack("n x32 c/x n/a c/x n/a", $buf);
+
+	my @ciphers = grep { !$grease{$_} } unpack("n*", $ciphers);
+
+	my (@ext, @elliptic_curve, @elliptic_curve_point_format);
+	while (length($ext)>2) {
+	    # 2 byte: extension value
+	    # 2|... : extension data
+	    (my $ext_val, my $ext_data, $ext) = unpack("n n/a a*", $ext);
+	    next if $grease{$ext_val};
+	    push @ext, $ext_val;
+	    if ($ext_val == 0x0a) {
+		# Elliptic curve points
+		@elliptic_curve = unpack("x2 n*", $ext_data);
+	    } elsif ($ext_val == 0x0b) {
+		# Elliptic curve point formats
+		@elliptic_curve_point_format = unpack("x c*", $ext_data);
+	    }
+	}
+
+	$$ja3_r = join(",",
+	    $ver,
+	    join("-", @ciphers),
+	    join("-", @ext),
+	    join("-", @elliptic_curve),
+	    join("-", @elliptic_curve_point_format),
+	);
+    }
 }

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/lib/IO/Socket/SSL.pm -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/lib/IO/Socket/SSL.pm Changed

@@ -13,7 +13,7 @@
 
 package IO::Socket::SSL;
 
-our $VERSION = '2.072';
+our $VERSION = '2.081';
 
 use IO::Socket;
 use Net::SSLeay 1.46;
@@ -39,6 +39,7 @@
 my $Net_SSLeay_ERROR_WANT_READ   = Net::SSLeay::ERROR_WANT_READ();
 my $Net_SSLeay_ERROR_WANT_WRITE  = Net::SSLeay::ERROR_WANT_WRITE();
 my $Net_SSLeay_ERROR_SYSCALL     = Net::SSLeay::ERROR_SYSCALL();
+my $Net_SSLeay_ERROR_SSL         = Net::SSLeay::ERROR_SSL();
 my $Net_SSLeay_VERIFY_NONE       = Net::SSLeay::VERIFY_NONE();
 my $Net_SSLeay_VERIFY_PEER       = Net::SSLeay::VERIFY_PEER();
 
@@ -75,6 +76,7 @@
 my $check_partial_chain; # use X509_V_FLAG_PARTIAL_CHAIN if available
 my $auto_retry;      # (clear|set)_mode SSL_MODE_AUTO_RETRY with OpenSSL 1.1.1+ with non-blocking
 my $ssl_mode_release_buffers = 0; # SSL_MODE_RELEASE_BUFFERS if available
+my $can_ciphersuites; # support for SSL_CTX_set_ciphersuites (TLS 1.3)
 
 my $openssl_version;
 my $netssleay_version;
@@ -112,6 +114,7 @@
     $can_tckt_keycb  = defined &Net::SSLeay::CTX_set_tlsext_ticket_getkey_cb
 	&& $netssleay_version >= 1.80;
     $can_pha = defined &Net::SSLeay::CTX_set_post_handshake_auth;
+    $can_ciphersuites = defined &Net::SSLeay::CTX_set_ciphersuites;
 
     if (defined &Net::SSLeay::SESSION_up_ref) {
 	$session_upref = 1;
@@ -190,7 +193,6 @@
     };
 }
 
-
 # global defaults
 my %DEFAULT_SSL_ARGS = (
     SSL_check_crl => 0,
@@ -202,11 +204,8 @@
     SSL_npn_protocols => undef,    # meaning depends whether on server or client side
     SSL_alpn_protocols => undef,   # list of protocols we'll accept/send, for example 'http/1.1','spdy/3.1'
 
-    # https://wiki.mozilla.org/Security/Server_Side_TLS, 2019/03/05
-    # "Old backward compatibility" for best compatibility
-    # .. "Most ciphers that are not clearly broken and dangerous to use are supported"
-    # slightly reordered to prefer AES since it is cheaper when hardware accelerated
-    SSL_cipher_list => 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:SEED:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!RSAPSK:!aDH:!aECDH:!EDH-DSS-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA:!SRP',
+    # rely on system default but be sure to disable some definitely bad ones
+    SSL_cipher_list => 'DEFAULT !EXP !MEDIUM !LOW !eNULL !aNULL !RC4 !DES !MD5 !PSK !SRP',
 );
 
 my %DEFAULT_SSL_CLIENT_ARGS = (
@@ -215,64 +214,6 @@
 
     SSL_ca_file => undef,
     SSL_ca_path => undef,
-
-    # older versions of F5 BIG-IP hang when getting SSL client hello >255 bytes
-    # http://support.f5.com/kb/en-us/solutions/public/13000/000/sol13037.html
-    # http://guest:guest@rt.openssl.org/Ticket/Display.html?id=2771
-    # Ubuntu worked around this by disabling TLSv1_2 on the client side for
-    # a while. Later a padding extension was added to OpenSSL to work around
-    # broken F5 but then IronPort croaked because it did not understand this
-    # extension so it was disabled again :(
-    # Firefox, Chrome and IE11 use TLSv1_2 but use only a few ciphers, so
-    # that packet stays small enough. We try the same here.
-
-    SSL_cipher_list => join(" ",
-
-	# SSLabs report for Chrome 48/OSX.
-	# This also includes the fewer ciphers Firefox uses.
-	'ECDHE-ECDSA-AES128-GCM-SHA256',
-	'ECDHE-RSA-AES128-GCM-SHA256',
-	'DHE-RSA-AES128-GCM-SHA256',
-	'ECDHE-ECDSA-CHACHA20-POLY1305',
-	'ECDHE-RSA-CHACHA20-POLY1305',
-	'ECDHE-ECDSA-AES256-SHA',
-	'ECDHE-RSA-AES256-SHA',
-	'DHE-RSA-AES256-SHA',
-	'ECDHE-ECDSA-AES128-SHA',
-	'ECDHE-RSA-AES128-SHA',
-	'DHE-RSA-AES128-SHA',
-	'AES128-GCM-SHA256',
-	'AES256-SHA',
-	'AES128-SHA',
-	'DES-CBC3-SHA',
-
-	# IE11/Edge has some more ciphers, notably SHA384 and DSS
-	# we don't offer the *-AES128-SHA256 and *-AES256-SHA384 non-GCM
-	# ciphers IE/Edge offers because they look like a large mismatch
-	# between a very strong HMAC and a comparably weak (but sufficient)
-	# encryption. Similar all browsers which do SHA384 can do ECDHE
-	# so skip the DHE*SHA384 ciphers.
-	'ECDHE-RSA-AES256-GCM-SHA384',
-	'ECDHE-ECDSA-AES256-GCM-SHA384',
-	# 'ECDHE-RSA-AES256-SHA384',
-	# 'ECDHE-ECDSA-AES256-SHA384',
-	# 'ECDHE-RSA-AES128-SHA256',
-	# 'ECDHE-ECDSA-AES128-SHA256',
-	# 'DHE-RSA-AES256-GCM-SHA384',
-	# 'AES256-GCM-SHA384',
-	'AES256-SHA256',
-	# 'AES128-SHA256',
-	'DHE-DSS-AES256-SHA256',
-	# 'DHE-DSS-AES128-SHA256',
-	'DHE-DSS-AES256-SHA',
-	'DHE-DSS-AES128-SHA',
-	'EDH-DSS-DES-CBC3-SHA',
-
-	# Just to make sure, that we don't accidentally add bad ciphers above.
-	# This includes dropping RC4 which is no longer supported by modern
-	# browsers and also excluded in the SSL libraries of Python and Ruby.
-	"!EXP !MEDIUM !LOW !eNULL !aNULL !RC4 !DES !MD5 !PSK !SRP"
-    )
 );
 
 # set values inside _init to work with perlcc, RT#95452
@@ -660,6 +601,7 @@
     _SSL_opened
     _SSL_opening
     _SSL_servername
+    _SSL_msg_callback
 );
 
 
@@ -811,6 +753,8 @@
 	Net::SSLeay::set_fd($ssl, $fileno)
 	    || return $self->error("SSL filehandle association failed");
 
+	set_msg_callback($self) if $DEBUG>=2 || ${*$self}{_SSL_msg_callback};
+
 	if ( $can_client_sni ) {
 	    my $host;
 	    if ( exists $arg_hash->{SSL_hostname} ) {
@@ -845,7 +789,13 @@
 		|| $arg_hash->{SSL_hostname};
 	    if ( ! defined $host ) {
 		if ( $host = $arg_hash->{PeerAddr} || $arg_hash->{PeerHost} ) {
-		    $host =~s{:a-zA-Z0-9_\-+$}{};
+		    $host =~s{^
+			(?:
+			    (^:\+) |    # ipv4|host
+			    ($.*)$     # ipv6|host
+			)
+			(:\w\-+)?        # optional :port
+		    $}{$1$2}x;             # ipv4|host|ipv6
 		}
 	    }
 	    ${$ctx->{verify_name_ref}} = $host;
@@ -1081,6 +1031,8 @@
 
 	Net::SSLeay::set_fd($ssl, $fileno)
 	    || return $socket->error("SSL filehandle association failed");
+
+	set_msg_callback($self) if $DEBUG>=2 || ${*$self}{_SSL_msg_callback};
     }
 
     $ssl ||= ${*$socket}{'_SSL_object'};
@@ -1169,12 +1121,48 @@
 }
 
 
+# support user defined message callback but also internal debugging
+sub _msg_callback {
+    ##  my ($direction, $ssl_ver, $content_type, $buf, $len, $ssl, $userp) = @_;
+    IO::Socket::SSL::Trace::ossl_trace(@_) if $DEBUG>=2;
+    my $self = ($SSL_OBJECT{$_5} || return)->0 || return;
+    if (my $cb = ${*$self}{_SSL_msg_callback}) {
+	my ($sub,@arg) = @$cb;
+	$sub->($self, @_0..5, @arg);
+    }
+}
+
+my $ssleay_set_msg_callback = defined &Net::SSLeay::set_msg_callback
+    && \&Net::SSLeay::set_msg_callback;
+
+sub set_msg_callback {
+    my $self = shift;
+    if (@_) {
+	if ($_0) {
+	    # enable user defined callback: ($cb,@arg)
+	    die "no support for msg callback with this version of Net::SSLeay/OpenSSL"
+		if !$ssleay_set_msg_callback;
+	    ${*$self}{_SSL_msg_callback} = @_;
+	} else {
+	    # disable user defined callback
+	    delete ${*$self}{_SSL_msg_callback};
+	}
+    }
+
+    # activate user set callback and/or internal for debugging
+    if ($ssleay_set_msg_callback and my $ssl = ${*$self}{_SSL_object}) {
+	$ssleay_set_msg_callback->($ssl,
+	    ($DEBUG>=2 || ${*$self}{_SSL_msg_callback})? \&_msg_callback : undef)
+    }
+}
+
+
 ####### I/O subroutines ########################
 
 if ($auto_retry) {
     *blocking = sub {
 	my $self = shift;
-	{ @_ && $auto_retry->($self->_get_ssl_object || last, @_); }
+	{ @_ && $auto_retry->(${*$self}{_SSL_object} || last, @_); }
 	return $self->SUPER::blocking(@_);
     };
 }
@@ -1188,13 +1176,12 @@
     my ($data,$rwerr) = $read_func->($ssl, $length);
     while ( ! defined($data)) {
 	if ( my $err = $self->_skip_rw_error( $ssl, defined($rwerr) ? $rwerr:-1 )) {
-	    if ($err == $Net_SSLeay_ERROR_SYSCALL) {
-		# OpenSSL 1.1.0c+ : EOF can now result in SSL_read returning -1
-		if (not $!) {
-		    # SSL_ERROR_SYSCALL but not errno -> treat as EOF
-		    $data = '';
-		    last;
-		}
+	    # OpenSSL 1.1.0c+ : EOF can now result in SSL_read returning -1 and SSL_ERROR_SYSCALL
+	    # OpenSSL 3.0 : EOF can now result in SSL_read returning -1 and SSL_ERROR_SSL
+	    if (not $! and $err == $Net_SSLeay_ERROR_SSL || $err == $Net_SSLeay_ERROR_SYSCALL) {
+		# treat as EOF
+		$data = '';
+		last;
 	    }
 	    $self->error("SSL read error");
 	}
@@ -1270,7 +1257,7 @@
     } else {
 	$written = Net::SSLeay::write_partial( $ssl,$offset,$length,$$buffer );
 	# write_partial does SSL_write which returns -1 on error
-	$written = undef if $written < 0;
+	$written = undef if $written <= 0;
     }
     if ( !defined($written) ) {
 	if ( my $err = $self->_skip_rw_error( $ssl,-1 )) {
@@ -1491,11 +1478,16 @@
 
 		# initiate or complete shutdown
 		local $SIG{PIPE} = 'IGNORE';
+		$SSL_ERROR = $! = undef;
 		my $rv = Net::SSLeay::shutdown($ssl);
 		if ( $rv < 0 ) {
 		    # non-blocking socket?
 		    if ( ! $timeout ) {
-			$self->_skip_rw_error( $ssl,$rv );
+			if ( my $err = $self->_skip_rw_error( $ssl, $rv )) {
+				# if $! is not set with ERROR_SYSCALL then report as EPIPE
+				$! ||= EPIPE if $err == $Net_SSLeay_ERROR_SYSCALL;
+				$self->error("SSL shutdown error ($err)");
+			}
 			# need to try again
 			return;
 		    }
@@ -2035,6 +2027,7 @@
     my $self = shift;
     my $error_trap = ${*$self}{'_SSL_arguments'}->{'SSL_error_trap'};
     $@ = $self->errstr;
+    my $saved_error = $SSL_ERROR;
     if (defined $error_trap and ref($error_trap) eq 'CODE') {
 	$error_trap->($self, $self->errstr()."\n".$self->get_ssleay_error());
     } elsif ( ${*$self}{'_SSL_ioclass_upgraded'}
@@ -2046,6 +2039,7 @@
 	# kill socket
 	$self->close
     }
+    $SSL_ERROR = $saved_error if $saved_error;
     return;
 }
 
@@ -2416,9 +2410,6 @@
 		    "Disabling default hostname verification for now. ".
 		    "Please specify hostname with SSL_verifycn_name and better set SSL_verifycn_scheme too.\n";
 		return $ok;
-	    } elsif ( ! $vcn_scheme && $host =~m{^\d.+$|:} ) {
-		# don't try to verify IP by default
-		return $ok;
 	    }
 
 
@@ -2975,6 +2966,16 @@
 	    ) || return IO::Socket::SSL->error("Failed to set SSL cipher list");
 	}
     }
+    if ( my $cl = $arg_hash->{SSL_ciphersuites} ) {
+	return IO::Socket::SSL->error("no support for SSL_ciphersuites in Net::SSLeay")
+	    if ! $can_ciphersuites;
+	for (keys %ctx) {
+	    Net::SSLeay::CTX_set_ciphersuites($ctx{$_}, ref($cl)
+		? $cl->{$_} || $cl->{''} || $DEFAULT_SSL_ARGS{SSL_cipher_list} || next
+		: $cl
+	    ) || return IO::Socket::SSL->error("Failed to set SSL cipher list");
+	}
+    }
 
     # Main context is default context or any other if no default context.
     my $ctx = $ctx{''} || (values %ctx)0;
@@ -3135,6 +3136,7 @@
     for (@del) {
 	_del_entry($self,$_);
 	Net::SSLeay::SESSION_free($_->SESSION) if $_->SESSION;
+	@$_ = ();
     }
     return ~~@del;
 }
@@ -3186,6 +3188,7 @@
 	my $l = $self->{ghead}GPREV;
 	_del_entry($self,$l);
 	Net::SSLeay::SESSION_free($l->SESSION) if $l->SESSION;
+	@$l = ();
     }
 }
 
@@ -3513,6 +3516,186 @@
     return $self->{hard_error};
 }
 
+package IO::Socket::SSL::Trace;
+*DEBUG = *IO::Socket::SSL::DEBUG;
+
+# Exhaustive list of constants we need for tracing
+my %trace_constants = map { $_ => eval { Net::SSLeay->$_ } || -1 } qw(
+    SSL2_VERSION
+    SSL3_VERSION
+    TLS1_VERSION
+    TLS1_1_VERSION
+    TLS1_2_VERSION
+    TLS1_3_VERSION
+    DTLS1_VERSION
+    DTLS1_2_VERSION
+    DTLS1_BAD_VER
+    SSL3_RT_INNER_CONTENT_TYPE
+    SSL3_RT_CHANGE_CIPHER_SPEC
+    SSL3_RT_ALERT
+    SSL3_RT_HEADER
+    SSL3_RT_HANDSHAKE
+    SSL3_RT_APPLICATION_DATA
+    SSL2_MT_ERROR
+    SSL2_MT_CLIENT_HELLO
+    SSL2_MT_CLIENT_MASTER_KEY
+    SSL2_MT_CLIENT_FINISHED
+    SSL2_MT_SERVER_HELLO
+    SSL2_MT_SERVER_VERIFY
+    SSL2_MT_SERVER_FINISHED
+    SSL2_MT_REQUEST_CERTIFICATE
+    SSL2_MT_CLIENT_CERTIFICATE
+    SSL3_MT_HELLO_REQUEST
+    SSL3_MT_CLIENT_HELLO
+    SSL3_MT_SERVER_HELLO
+    SSL3_MT_NEWSESSION_TICKET
+    SSL3_MT_CERTIFICATE
+    SSL3_MT_SERVER_KEY_EXCHANGE
+    SSL3_MT_CLIENT_KEY_EXCHANGE
+    SSL3_MT_CERTIFICATE_REQUEST
+    SSL3_MT_SERVER_DONE
+    SSL3_MT_CERTIFICATE_VERIFY
+    SSL3_MT_FINISHED
+    SSL3_MT_CERTIFICATE_STATUS
+    SSL3_MT_ENCRYPTED_EXTENSIONS
+    SSL3_MT_SUPPLEMENTAL_DATA
+    SSL3_MT_END_OF_EARLY_DATA
+    SSL3_MT_KEY_UPDATE
+    SSL3_MT_NEXT_PROTO
+    SSL3_MT_MESSAGE_HASH
+);
+
+#
+# Major versions
+#
+$trace_constants{SSL2_VERSION_MAJOR} = $trace_constants{SSL2_VERSION} >> 8;
+$trace_constants{SSL3_VERSION_MAJOR} = $trace_constants{SSL3_VERSION} >> 8;
+
+#
+# Mapping between trace constant and version string
+#
+my %tc_ver2s;
+for (
+     SSL2_VERSION    => "SSLv2" ,
+     SSL2_VERSION    => "SSLv2" ,
+     SSL3_VERSION    => "SSLv3" ,
+     TLS1_VERSION    => "TLSv1.0" ,
+     TLS1_1_VERSION  => "TLSv1.1" ,
+     TLS1_2_VERSION  => "TLSv1.2" ,
+     TLS1_3_VERSION  => "TLSv1.3" ,
+     DTLS1_VERSION   => "DTLSv1.0" ,
+     DTLS1_2_VERSION => "DTLSv1.2" ,
+     DTLS1_BAD_VER   => "DTLSv1.0 (bad)" 
+) {
+    next if $trace_constants{$_->0} == -1;
+    $tc_ver2s{$trace_constants{$_->0}} = $_->1;
+}
+
+my %tc_type2s;
+for (
+     SSL3_RT_HEADER             => "TLS header" ,
+     SSL3_RT_CHANGE_CIPHER_SPEC => "TLS change cipher" ,
+     SSL3_RT_ALERT              => "TLS alert" ,
+     SSL3_RT_HANDSHAKE          => "TLS handshake" ,
+     SSL3_RT_APPLICATION_DATA   => "TLS app data" 
+) {
+    next if $trace_constants{$_->0} == -1;
+    $tc_type2s{$trace_constants{$_->0}} = $_->1;
+}
+
+my %tc_msgtype2s;
+for(
+     SSL2_MT_ERROR               => "Error" ,
+     SSL2_MT_CLIENT_HELLO        => "Client hello" ,
+     SSL2_MT_CLIENT_MASTER_KEY   => "Client key" ,
+     SSL2_MT_CLIENT_FINISHED     => "Client finished" ,
+     SSL2_MT_SERVER_HELLO        => "Server hello" ,
+     SSL2_MT_SERVER_VERIFY       => "Server verify" ,
+     SSL2_MT_SERVER_FINISHED     => "Server finished" ,
+     SSL2_MT_REQUEST_CERTIFICATE => "Request CERT" ,
+     SSL2_MT_REQUEST_CERTIFICATE => "Client CERT" 
+) {
+    next if $trace_constants{$_->0} == -1;
+    $tc_msgtype2s{$trace_constants{SSL2_VERSION_MAJOR}, $trace_constants{$_->0}} = $_->1;
+}
+for(
+     SSL3_MT_HELLO_REQUEST        => "Hello request" ,
+     SSL3_MT_CLIENT_HELLO         => "Client hello" ,
+     SSL3_MT_SERVER_HELLO         => "Server hello" ,
+     SSL3_MT_NEWSESSION_TICKET    => "Newsession Ticket" ,
+     SSL3_MT_CERTIFICATE          => "Certificate" ,
+     SSL3_MT_SERVER_KEY_EXCHANGE  => "Server key exchange" ,
+     SSL3_MT_CLIENT_KEY_EXCHANGE  => "Client key exchange" ,
+     SSL3_MT_CERTIFICATE_REQUEST  => "Request CERT" ,
+     SSL3_MT_SERVER_DONE          => "Server finished" ,
+     SSL3_MT_CERTIFICATE_VERIFY   => "CERT verify" ,
+     SSL3_MT_FINISHED             => "Finished" ,
+     SSL3_MT_CERTIFICATE_STATUS   => "Certificate Status" ,
+     SSL3_MT_ENCRYPTED_EXTENSIONS => "Encrypted Extensions" ,
+     SSL3_MT_SUPPLEMENTAL_DATA    => "Supplemental data" ,
+     SSL3_MT_END_OF_EARLY_DATA    => "End of early data" ,
+     SSL3_MT_KEY_UPDATE           => "Key update" ,
+     SSL3_MT_NEXT_PROTO           => "Next protocol" ,
+     SSL3_MT_MESSAGE_HASH         => "Message hash" 
+) {
+    next if $trace_constants{$_->0} == -1;
+    $tc_msgtype2s{$trace_constants{SSL3_VERSION_MAJOR}, $trace_constants{$_->0}} = $_->1;
+}
+
+#
+# Translation of curl ossl_trace
+#
+
+sub ossl_trace {
+    $DEBUG>=2 or return;
+    my ($direction, $ssl_ver, $content_type, $buf, $len, $ssl) = @_;
+
+    my $verstr = $tc_ver2s{$ssl_ver} || "(version=$ssl_ver)";
+
+    # Log progress for interesting records only (like Handshake or Alert), skip
+    # all raw record headers (content_type == SSL3_RT_HEADER or ssl_ver == 0).
+    # For TLS 1.3, skip notification of the decrypted inner Content-Type.
+
+    if ($ssl_ver
+	&& ($content_type != $trace_constants{SSL3_RT_HEADER})
+	&& ($content_type != $trace_constants{SSL3_RT_INNER_CONTENT_TYPE})
+    ) {
+
+        # the info given when the version is zero is not that useful for us
+        $ssl_ver >>= 8;  # check the upper 8 bits only below */
+
+        # SSLv2 doesn't seem to have TLS record-type headers, so OpenSSL
+        # always pass-up content-type as 0. But the interesting message-type
+        # is at 'buf0'.
+
+	my $tls_rt_name = ($ssl_ver == $trace_constants{SSL3_VERSION_MAJOR} && $content_type)
+	    ? $tc_type2s{$content_type} || "TLS Unknown (type=$content_type)"
+	    : "";
+
+        my $msg_type;
+        my $msg_name;
+        if ($content_type == $trace_constants{SSL3_RT_CHANGE_CIPHER_SPEC}) {
+            $msg_type = unpack('c1', $buf);
+            $msg_name = "Change cipher spec";
+        } elsif ($content_type == $trace_constants{SSL3_RT_ALERT}) {
+            my @c = unpack('c2', $buf);
+            $msg_type = ($c0 << 8) + $c1;
+            $msg_name = eval { Net::SSLeay::SSL_alert_desc_string_long($msg_type) } || "Unknown alert";
+        } else {
+            $msg_type = unpack('c1', $buf);
+	    $msg_name = $tc_msgtype2s{$ssl_ver, $msg_type} || "Unknown (ssl_ver=$ssl_ver, msg=$msg_type)";
+        }
+	DEBUG(sprintf("* %s (%s), %s, %s (%d)",
+	    $verstr, $direction ? "OUT" : "IN", $tls_rt_name, $msg_name, $msg_type));
+    }
+
+    #
+    # Here one might want to hexdump $buf (?)
+    #
+    # $DEBUG>=4 && printf STDERR "%s", hexdump($buf);
+}
+
+
 1;
 
 __END__

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/lib/IO/Socket/SSL.pod -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/lib/IO/Socket/SSL.pod Changed

@@ -545,8 +545,8 @@
 
 =item *
 
-2 - Print also information about call flow from L<IO::Socket::SSL> and progress
-information from L<Net::SSLeay>.
+2 - Print also information about call flow from L<IO::Socket::SSL>, progress
+information from L<Net::SSLeay> and state information from OpenSSL.
 
 =item *
 
@@ -1064,17 +1064,31 @@
 =item SSL_cipher_list
 
 If this option is set the cipher list for the connection will be set to the
-given value, e.g. something like 'ALL:!LOW:!EXP:!aNULL'. Look into the OpenSSL
-documentation (L<https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html#CIPHER-STRINGS>)
+given value, e.g. something like 'ALL:!LOW:!EXP:!aNULL'. This will only affect
+ciphers for TLS 1.2 and lower. See the OpenSSL documentation
+(L<https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html#CIPHER-STRINGS>)
 for more details.
 
 Unless you fail to contact your peer because of no shared ciphers it is
-recommended to leave this option at the default setting. The default setting
-prefers ciphers with forward secrecy, disables anonymous authentication and
-disables known insecure ciphers like MD5, DES etc. This gives a grade A result
-at the tests of SSL Labs.
-To use the less secure OpenSSL builtin default (whatever this is) set
-SSL_cipher_list to ''.
+recommended to leave this option at the default setting, which uses the system
+default but disables some insecure ciphers which might still be enabled on older
+systems.
+
+In case different cipher lists are needed for different SNI hosts a hash can be
+given with the host as key and the cipher suite as value, similar to
+B<SSL_cert*>.
+
+=item SSL_ciphersuites
+
+If this option is set the TLS 1.3 ciphersuites for the connection will be
+set to the given value. This is similar to SSL_cipher_list, but only for TLS 1.3
+ciphers. See argument C<-ciphersuits> in the OpenSSL documentation
+(L<https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html>) for
+details.
+
+Unless you fail to contact your peer because of no shared ciphers it is
+recommended to leave this option at the default setting, which uses the system
+default.
 
 In case different cipher lists are needed for different SNI hosts a hash can be
 given with the host as key and the cipher suite as value, similar to
@@ -1887,6 +1901,34 @@
 retry the call after the socket got readable (SSL_WANT_READ) or writeable
 (SSL_WANT_WRITE).
 
+=item B<set_msg_callback>
+
+This will add/remove a user defined callback for each message, internally using
+openssl SSL_set_msg_callback API. To make sure that the callback is active
+before the handshake starts, combine it with C<< SSL_startHandshake => 0 >> in
+the preceding setup of the SSL object. To remove callback explicitly call it
+with an empty callback function.
+
+Example:
+
+    $sock = IO::Socket::SSL->new( .... , SSL_startHandshake => 0);
+    # set callback
+    $sock->set_msg_callback(\&cb, $cbarg1, $cbarg2);
+    $sock->connect_SSL();
+
+    sub cb {
+	my ($sock,
+	    # see SSL_set_msg_callback for the following args
+	    $direction, $ssl_ver, $content_type, $buf, $len, $ssl,
+	    $cbarg1, $cbarg2)
+	    = @_;
+	...
+	if (no_longer_need_cb) {
+	    # disable callback
+	    $sock->set_msg_callback(undef);
+	}
+    }
+
 =item B<ocsp_resolver>
 
 This will create an OCSP resolver object, which can be used to create OCSP

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/lib/IO/Socket/SSL/PublicSuffix.pm -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/lib/IO/Socket/SSL/PublicSuffix.pm Changed

@@ -357,7 +357,7 @@
 
 // ===BEGIN ICANN DOMAINS===
 
-// ac : https://en.wikipedia.org/wiki/.ac
+// ac : http://nic.ac/rules.htm
 ac
 com.ac
 edu.ac
@@ -370,8 +370,7 @@
 ad
 nom.ad
 
-// ae : https://en.wikipedia.org/wiki/.ae
-// see also: "Domain Name Eligibility Policy" at http://www.aeda.ae/eng/aepolicy.php
+// ae : https://tdra.gov.ae/en/aeda/ae-policies
 ae
 co.ae
 net.ae
@@ -523,17 +522,21 @@
 // aq : https://en.wikipedia.org/wiki/.aq
 aq
 
-// ar : https://nic.ar/nic-argentina/normativa-vigente
+// ar : https://nic.ar/es/nic-argentina/normativa
 ar
+bet.ar
 com.ar
+coop.ar
 edu.ar
 gob.ar
 gov.ar
 int.ar
 mil.ar
 musica.ar
+mutual.ar
 net.ar
 org.ar
+senasa.ar
 tur.ar
 
 // arpa : https://en.wikipedia.org/wiki/.arpa
@@ -1186,7 +1189,13 @@
 inf.cu
 
 // cv : https://en.wikipedia.org/wiki/.cv
+// cv : http://www.dns.cv/tldcv_portal/do?com=DS;5446457100;111;+PAGE(4000018)+K-CAT-CODIGO(RDOM)+RCNT(100); <- registration rules
 cv
+com.cv
+edu.cv
+int.cv
+nome.cv
+org.cv
 
 // cw : http://www.una.cw/cw_registry/
 // Confirmed by registry <registry@una.net> 2013-03-26
@@ -1203,6 +1212,7 @@
 
 // cy : http://www.nic.cy/
 // Submitted by registry Panayiotou Fotia <cydns@ucy.ac.cy>
+// namespace policies URL https://www.nic.cy/portal//sites/default/files/symfonia_gia_eggrafi.pdf
 cy
 ac.cy
 biz.cy
@@ -1210,10 +1220,9 @@
 ekloges.cy
 gov.cy
 ltd.cy
-name.cy
+mil.cy
 net.cy
 org.cy
-parliament.cy
 press.cy
 pro.cy
 tm.cy
@@ -1523,6 +1532,7 @@
 web.gu
 
 // gw : https://en.wikipedia.org/wiki/.gw
+// gw : https://nic.gw/regras/
 gw
 
 // gy : https://en.wikipedia.org/wiki/.gy
@@ -1653,7 +1663,9 @@
 ie
 gov.ie
 
-// il : http://www.isoc.org.il/domains/
+// il :         http://www.isoc.org.il/domains/
+// see also:    https://en.isoc.org.il/il-cctld/registration-rules
+// ISOC-IL      (operated by .il Registry)
 il
 ac.il
 co.il
@@ -1663,6 +1675,16 @@
 muni.il
 net.il
 org.il
+// xn--4dbrk0ce ("Israel", Hebrew) : IL
+xn--4dbrk0ce
+// xn--4dbgdty6c.xn--4dbrk0ce.
+xn--4dbgdty6c.xn--4dbrk0ce
+// xn--5dbhl8d.xn--4dbrk0ce.
+xn--5dbhl8d.xn--4dbrk0ce
+// xn--8dbq2a.xn--4dbrk0ce.
+xn--8dbq2a.xn--4dbrk0ce
+// xn--hebda8b.xn--4dbrk0ce.
+xn--hebda8b.xn--4dbrk0ce
 
 // im : https://www.nic.im/
 // Submitted by registry <info@nic.im>
@@ -1678,22 +1700,51 @@
 tv.im
 
 // in : https://en.wikipedia.org/wiki/.in
-// see also: https://registry.in/Policies
+// see also: https://registry.in/policies
 // Please note, that nic.in is not an official eTLD, but used by most
 // government institutions.
 in
+5g.in
+6g.in
+ac.in
+ai.in
+am.in
+bihar.in
+biz.in
+business.in
+ca.in
+cn.in
 co.in
+com.in
+coop.in
+cs.in
+delhi.in
+dr.in
+edu.in
+er.in
 firm.in
-net.in
-org.in
 gen.in
+gov.in
+gujarat.in
 ind.in
+info.in
+int.in
+internet.in
+io.in
+me.in
+mil.in
+net.in
 nic.in
-ac.in
-edu.in
+org.in
+pg.in
+post.in
+pro.in
 res.in
-gov.in
-mil.in
+travel.in
+tv.in
+uk.in
+up.in
+us.in
 
 // info : https://en.wikipedia.org/wiki/.info
 info
@@ -1703,7 +1754,7 @@
 int
 eu.int
 
-// io : http://www.nic.io/rules.html
+// io : http://www.nic.io/rules.htm
 // list of other 2nd level tlds ?
 io
 com.io
@@ -4102,11 +4153,10 @@
 // ky : http://www.icta.ky/da_ky_reg_dom.php
 // Confirmed by registry <kysupport@perimeterusa.com> 2008-06-17
 ky
-edu.ky
-gov.ky
 com.ky
-org.ky
+edu.ky
 net.ky
+org.ky
 
 // kz : https://en.wikipedia.org/wiki/.kz
 // see also: http://www.nic.kz/rules/index.jsp
@@ -6197,7 +6247,7 @@
 org.ps
 net.ps
 
-// pt : http://online.dns.pt/dns/start_dns
+// pt : https://www.dns.pt/en/domain/pt-terms-and-conditions-registration-rules/
 pt
 net.pt
 gov.pt
@@ -6374,7 +6424,7 @@
 edu.sg
 per.sg
 
-// sh : http://www.nic.sh/registrar.html
+// sh : http://nic.sh/rules.htm
 sh
 com.sh
 net.sh
@@ -6550,29 +6600,22 @@
 mil.tm
 edu.tm
 
-// tn : https://en.wikipedia.org/wiki/.tn
-// http://whois.ati.tn/
+// tn : http://www.registre.tn/fr/
+// https://whois.ati.tn/
 tn
 com.tn
 ens.tn
 fin.tn
 gov.tn
 ind.tn
+info.tn
 intl.tn
+mincom.tn
 nat.tn
 net.tn
 org.tn
-info.tn
 perso.tn
 tourism.tn
-edunet.tn
-rnrt.tn
-rns.tn
-rnu.tn
-mincom.tn
-agrinet.tn
-defense.tn
-turen.tn
 
 // to : https://en.wikipedia.org/wiki/.to
 // Submitted by registry <egullich@colo.to>
@@ -7062,9 +7105,10 @@
 edu.vc
 
 // ve : https://registro.nic.ve/
-// Submitted by registry
+// Submitted by registry nic@nic.ve and nicve@conatel.gob.ve
 ve
 arts.ve
+bib.ve
 co.ve
 com.ve
 e12.ve
@@ -7076,7 +7120,9 @@
 int.ve
 mil.ve
 net.ve
+nom.ve
 org.ve
+rar.ve
 rec.ve
 store.ve
 tec.ve
@@ -7473,7 +7519,7 @@
 
 // newGTLDs
 
-// List of new gTLDs imported from https://www.icann.org/resources/registries/gtlds/v2/gtlds.json on 2021-08-05T15:14:20Z
+// List of new gTLDs imported from https://www.icann.org/resources/registries/gtlds/v2/gtlds.json on 2022-11-02T15:17:39Z
 // This list is auto-generated, don't edit it manually.
 // aaa : 2015-02-26 American Automobile Association, Inc.
 aaa
@@ -7538,9 +7584,6 @@
 // aetna : 2015-05-21 Aetna Life Insurance Company
 aetna
 
-// afamilycompany : 2015-07-23 Johnson Shareholdings, Inc.
-afamilycompany
-
 // afl : 2014-10-02 Australian Football League
 afl
 
@@ -7646,7 +7689,7 @@
 // aramco : 2014-11-20 Aramco Services Company
 aramco
 
-// archi : 2014-02-06 Afilias Limited
+// archi : 2014-02-06 Identity Digital Limited
 archi
 
 // army : 2014-03-06 Dog Beach, LLC
@@ -7679,7 +7722,7 @@
 // audible : 2015-06-25 Amazon Registry Services, Inc.
 audible
 
-// audio : 2014-03-20 UNR Corp.
+// audio : 2014-03-20 XYZ.COM LLC
 audio
 
 // auspost : 2015-08-13 Australian Postal Corporation
@@ -7694,7 +7737,7 @@
 // autos : 2014-01-09 XYZ.COM LLC
 autos
 
-// avianca : 2015-01-08 Avianca Holdings S.A.
+// avianca : 2015-01-08 Avianca Inc.
 avianca
 
 // aws : 2015-06-25 AWS Registry LLC
@@ -7790,7 +7833,7 @@
 // bestbuy : 2015-07-31 BBY Solutions, Inc.
 bestbuy
 
-// bet : 2015-05-07 Afilias Limited
+// bet : 2015-05-07 Identity Digital Limited
 bet
 
 // bharti : 2014-01-09 Bharti Enterprises (Holding) Private Limited
@@ -7811,13 +7854,13 @@
 // bingo : 2014-12-04 Binky Moon, LLC
 bingo
 
-// bio : 2014-03-06 Afilias Limited
+// bio : 2014-03-06 Identity Digital Limited
 bio
 
-// black : 2014-01-16 Afilias Limited
+// black : 2014-01-16 Identity Digital Limited
 black
 
-// blackfriday : 2014-01-16 UNR Corp.
+// blackfriday : 2014-01-16 Registry Services, LLC
 blackfriday
 
 // blockbuster : 2015-07-30 Dish DBS Corporation
@@ -7829,7 +7872,7 @@
 // bloomberg : 2014-07-17 Bloomberg IP Holdings LLC
 bloomberg
 
-// blue : 2013-11-07 Afilias Limited
+// blue : 2013-11-07 Identity Digital Limited
 blue
 
 // bms : 2014-10-30 Bristol-Myers Squibb Company
@@ -7871,7 +7914,7 @@
 // bostik : 2015-05-28 Bostik SA
 bostik
 
-// boston : 2015-12-10 Boston TLD Management, LLC
+// boston : 2015-12-10 Registry Services, LLC
 boston
 
 // bot : 2014-12-18 Amazon Registry Services, Inc.
@@ -7901,12 +7944,6 @@
 // brussels : 2014-02-06 DNS.be vzw
 brussels
 
-// budapest : 2013-11-21 Minds + Machines Group Limited
-budapest
-
-// bugatti : 2015-07-23 Bugatti International SA
-bugatti
-
 // build : 2013-11-07 Plan Bee LLC
 build
 
@@ -7940,7 +7977,7 @@
 // calvinklein : 2015-07-30 PVH gTLD Holdings LLC
 calvinklein
 
-// cam : 2016-04-21 AC Webconnecting Holding B.V.
+// cam : 2016-04-21 Cam Connecting SARL
 cam
 
 // camera : 2013-08-27 Binky Moon, LLC
@@ -7949,9 +7986,6 @@
 // camp : 2013-11-07 Binky Moon, LLC
 camp
 
-// cancerresearch : 2014-05-15 Australian Cancer Research Foundation
-cancerresearch
-
 // canon : 2014-09-12 Canon Inc.
 canon
 
@@ -7988,7 +8022,7 @@
 // casa : 2013-11-21 Registry Services, LLC
 casa
 
-// case : 2015-09-03 CNH Industrial N.V.
+// case : 2015-09-03 Digity, LLC
 case
 
 // cash : 2014-03-06 Binky Moon, LLC
@@ -8036,7 +8070,7 @@
 // channel : 2014-05-08 Charleston Road Registry Inc.
 channel
 
-// charity : 2018-04-11 Binky Moon, LLC
+// charity : 2018-04-11 Public Interest Registry
 charity
 
 // chase : 2015-04-30 JPMorgan Chase Bank, National Association
@@ -8051,7 +8085,7 @@
 // chintai : 2015-06-11 CHINTAI Corporation
 chintai
 
-// christmas : 2013-11-21 UNR Corp.
+// christmas : 2013-11-21 XYZ.COM LLC
 christmas
 
 // chrome : 2014-07-24 Charleston Road Registry Inc.
@@ -8090,7 +8124,7 @@
 // cleaning : 2013-12-05 Binky Moon, LLC
 cleaning
 
-// click : 2014-06-05 UNR Corp.
+// click : 2014-06-05 Internet Naming Company LLC
 click
 
 // clinic : 2014-03-20 Binky Moon, LLC
@@ -8174,7 +8208,7 @@
 // corsica : 2014-09-25 Collectivité de Corse
 corsica
 
-// country : 2013-12-19 DotCountry LLC
+// country : 2013-12-19 Internet Naming Company LLC
 country
 
 // coupon : 2015-02-26 Amazon Registry Services, Inc.
@@ -8183,7 +8217,7 @@
 // coupons : 2015-03-26 Binky Moon, LLC
 coupons
 
-// courses : 2014-12-04 OPEN UNIVERSITIES AUSTRALIA PTY LTD
+// courses : 2014-12-04 Registry Services, LLC
 courses
 
 // cpa : 2019-06-10 American Institute of Certified Public Accountants
@@ -8213,9 +8247,6 @@
 // cruises : 2013-12-05 Binky Moon, LLC
 cruises
 
-// csc : 2014-09-25 Alliance-One Services, Inc.
-csc
-
 // cuisinella : 2014-04-03 SCHMIDT GROUPE S.A.S.
 cuisinella
 
@@ -8303,7 +8334,7 @@
 // diamonds : 2013-09-22 Binky Moon, LLC
 diamonds
 
-// diet : 2014-06-26 UNR Corp.
+// diet : 2014-06-26 XYZ.COM LLC
 diet
 
 // digital : 2014-03-06 Binky Moon, LLC
@@ -8357,13 +8388,10 @@
 // dubai : 2015-01-01 Dubai Smart Government Department
 dubai
 
-// duck : 2015-07-23 Johnson Shareholdings, Inc.
-duck
-
 // dunlop : 2015-07-02 The Goodyear Tire & Rubber Company
 dunlop
 
-// dupont : 2015-06-25 E. I. du Pont de Nemours and Company
+// dupont : 2015-06-25 DuPont Specialty Products USA, LLC
 dupont
 
 // durban : 2014-03-24 ZA Central Registry NPC trading as ZA Central Registry
@@ -8375,7 +8403,7 @@
 // dvr : 2016-05-26 DISH Technologies L.L.C.
 dvr
 
-// earth : 2014-12-04 Interlink Co., Ltd.
+// earth : 2014-12-04 Interlink Systems Innovation Institute K.K.
 earth
 
 // eat : 2014-01-23 Charleston Road Registry Inc.
@@ -8552,7 +8580,7 @@
 // florist : 2013-11-07 Binky Moon, LLC
 florist
 
-// flowers : 2014-10-09 UNR Corp.
+// flowers : 2014-10-09 XYZ.COM LLC
 flowers
 
 // fly : 2014-05-08 Charleston Road Registry Inc.
@@ -8582,7 +8610,7 @@
 // forum : 2015-04-02 Fegistry, LLC
 forum
 
-// foundation : 2013-12-05 Binky Moon, LLC
+// foundation : 2013-12-05 Public Interest Registry
 foundation
 
 // fox : 2015-09-11 FOX Registry, LLC
@@ -8639,7 +8667,7 @@
 // gallup : 2015-02-19 Gallup, Inc.
 gallup
 
-// game : 2015-05-28 UNR Corp.
+// game : 2015-05-28 XYZ.COM LLC
 game
 
 // games : 2015-05-28 Dog Beach, LLC
@@ -8663,7 +8691,7 @@
 // gea : 2014-12-04 GEA Group Aktiengesellschaft
 gea
 
-// gent : 2014-01-23 COMBELL NV
+// gent : 2014-01-23 Easyhost BV
 gent
 
 // genting : 2015-03-12 Resorts World Inc Pte. Ltd.
@@ -8681,15 +8709,12 @@
 // gifts : 2014-07-03 Binky Moon, LLC
 gifts
 
-// gives : 2014-03-06 Dog Beach, LLC
+// gives : 2014-03-06 Public Interest Registry
 gives
 
-// giving : 2014-11-13 Giving Limited
+// giving : 2014-11-13 Public Interest Registry
 giving
 
-// glade : 2015-07-23 Johnson Shareholdings, Inc.
-glade
-
 // glass : 2013-11-07 Binky Moon, LLC
 glass
 
@@ -8753,7 +8778,7 @@
 // gratis : 2014-03-20 Binky Moon, LLC
 gratis
 
-// green : 2014-05-08 Afilias Limited
+// green : 2014-05-08 Identity Digital Limited
 green
 
 // gripe : 2014-03-06 Binky Moon, LLC
@@ -8777,7 +8802,7 @@
 // guide : 2013-09-13 Binky Moon, LLC
 guide
 
-// guitars : 2013-11-14 UNR Corp.
+// guitars : 2013-11-14 XYZ.COM LLC
 guitars
 
 // guru : 2013-08-27 Binky Moon, LLC
@@ -8810,7 +8835,7 @@
 // healthcare : 2014-06-12 Binky Moon, LLC
 healthcare
 
-// help : 2014-06-26 UNR Corp.
+// help : 2014-06-26 Innovation service Limited
 help
 
 // helsinki : 2015-02-05 City of Helsinki
@@ -8825,7 +8850,7 @@
 // hgtv : 2015-07-02 Lifestyle Domain Holdings, Inc.
 hgtv
 
-// hiphop : 2014-03-06 UNR Corp.
+// hiphop : 2014-03-06 Dot Hip Hop, LLC
 hiphop
 
 // hisamitsu : 2015-07-16 Hisamitsu Pharmaceutical Co.,Inc.
@@ -8834,7 +8859,7 @@
 // hitachi : 2014-10-31 Hitachi, Ltd.
 hitachi
 
-// hiv : 2014-03-13 UNR Corp.
+// hiv : 2014-03-13 Internet Naming Company LLC
 hiv
 
 // hkt : 2015-05-14 PCCW-HKT DataCom Services Limited
@@ -8873,7 +8898,7 @@
 // host : 2014-04-17 Radix FZC
 host
 
-// hosting : 2014-05-29 UNR Corp.
+// hosting : 2014-05-29 XYZ.COM LLC
 hosting
 
 // hot : 2015-08-27 Amazon Registry Services, Inc.
@@ -9038,7 +9063,7 @@
 // jprs : 2014-09-18 Japan Registry Services Co., Ltd.
 jprs
 
-// juegos : 2014-03-20 UNR Corp.
+// juegos : 2014-03-20 Internet Naming Company LLC
 juegos
 
 // juniper : 2015-07-30 JUNIPER NETWORKS, INC.
@@ -9065,7 +9090,10 @@
 // kia : 2015-07-09 KIA MOTORS CORPORATION
 kia
 
-// kim : 2013-09-23 Afilias Limited
+// kids : 2021-08-13 DotKids Foundation Limited
+kids
+
+// kim : 2013-09-23 Identity Digital Limited
 kim
 
 // kinder : 2014-11-07 Ferrero Trading Lux S.A.
@@ -9134,7 +9162,7 @@
 // lasalle : 2015-04-02 Jones Lang LaSalle Incorporated
 lasalle
 
-// lat : 2014-10-16 ECOM-LAC Federaciòn de Latinoamèrica y el Caribe para Internet y el Comercio Electrònico
+// lat : 2014-10-16 XYZ.COM LLC
 lat
 
 // latino : 2015-07-30 Dish DBS Corporation
@@ -9170,7 +9198,7 @@
 // lexus : 2015-04-23 TOYOTA MOTOR CORPORATION
 lexus
 
-// lgbt : 2014-05-08 Afilias Limited
+// lgbt : 2014-05-08 Identity Digital Limited
 lgbt
 
 // lidl : 2014-09-18 Schwarz Domains und Services GmbH & Co. KG
@@ -9206,7 +9234,7 @@
 // linde : 2014-12-04 Linde Aktiengesellschaft
 linde
 
-// link : 2013-11-14 UNR Corp.
+// link : 2013-11-14 Nova Registry Ltd
 link
 
 // lipsy : 2015-06-25 Lipsy Ltd
@@ -9218,13 +9246,10 @@
 // living : 2015-07-30 Lifestyle Domain Holdings, Inc.
 living
 
-// lixil : 2015-03-19 LIXIL Group Corporation
-lixil
-
-// llc : 2017-12-14 Afilias Limited
+// llc : 2017-12-14 Identity Digital Limited
 llc
 
-// llp : 2019-08-26 UNR Corp.
+// llp : 2019-08-26 Intercap Registry Inc.
 llp
 
 // loan : 2014-11-20 dot Loan Limited
@@ -9242,7 +9267,7 @@
 // loft : 2015-07-30 Annco, Inc.
 loft
 
-// lol : 2015-01-30 UNR Corp.
+// lol : 2015-01-30 XYZ.COM LLC
 lol
 
 // london : 2013-11-14 Dot London Domains Limited
@@ -9251,7 +9276,7 @@
 // lotte : 2014-11-07 Lotte Holdings Co., Ltd.
 lotte
 
-// lotto : 2014-04-10 Afilias Limited
+// lotto : 2014-04-10 Identity Digital Limited
 lotto
 
 // love : 2014-12-22 Merchant Law Group LLP
@@ -9359,7 +9384,7 @@
 // merckmsd : 2016-07-14 MSD Registry Holdings, Inc.
 merckmsd
 
-// miami : 2013-12-19 Minds + Machines Group Limited
+// miami : 2013-12-19 Registry Services, LLC
 miami
 
 // microsoft : 2014-12-18 Microsoft Corporation
@@ -9392,13 +9417,13 @@
 // moda : 2013-11-07 Dog Beach, LLC
 moda
 
-// moe : 2013-11-13 Interlink Co., Ltd.
+// moe : 2013-11-13 Interlink Systems Innovation Institute K.K.
 moe
 
 // moi : 2014-12-18 Amazon Registry Services, Inc.
 moi
 
-// mom : 2015-04-16 UNR Corp.
+// mom : 2015-04-16 XYZ.COM LLC
 mom
 
 // monash : 2013-09-30 Monash University
@@ -9554,9 +9579,6 @@
 // observer : 2015-04-30 Dog Beach, LLC
 observer
 
-// off : 2015-07-23 Johnson Shareholdings, Inc.
-off
-
 // office : 2015-03-12 Microsoft Corporation
 office
 
@@ -9602,7 +9624,7 @@
 // orange : 2015-03-12 Orange Brand Services Limited
 orange
 
-// organic : 2014-03-27 Afilias Limited
+// organic : 2014-03-27 Identity Digital Limited
 organic
 
 // origins : 2015-10-01 The Estée Lauder Companies Inc.
@@ -9650,7 +9672,7 @@
 // pccw : 2015-05-14 PCCW Enterprises Limited
 pccw
 
-// pet : 2015-05-07 Afilias Limited
+// pet : 2015-05-07 Identity Digital Limited
 pet
 
 // pfizer : 2015-09-11 Pfizer Inc.
@@ -9668,7 +9690,7 @@
 // phone : 2016-06-02 Dish DBS Corporation
 phone
 
-// photo : 2013-11-14 UNR Corp.
+// photo : 2013-11-14 Registry Services, LLC
 photo
 
 // photography : 2013-09-20 Binky Moon, LLC
@@ -9680,7 +9702,7 @@
 // physio : 2014-05-01 PhysBiz Pty Ltd
 physio
 
-// pics : 2013-11-14 UNR Corp.
+// pics : 2013-11-14 XYZ.COM LLC
 pics
 
 // pictet : 2014-06-26 Pictet Europe S.A.
@@ -9698,7 +9720,7 @@
 // ping : 2015-06-11 Ping Registry Provider, Inc.
 ping
 
-// pink : 2013-10-01 Afilias Limited
+// pink : 2013-10-01 Identity Digital Limited
 pink
 
 // pioneer : 2015-07-16 Pioneer Corporation
@@ -9728,7 +9750,7 @@
 // pohl : 2014-06-23 Deutsche Vermögensberatung Aktiengesellschaft DVAG
 pohl
 
-// poker : 2014-07-03 Afilias Limited
+// poker : 2014-07-03 Identity Digital Limited
 poker
 
 // politie : 2015-08-20 Politie Nederland
@@ -9761,13 +9783,13 @@
 // progressive : 2015-07-23 Progressive Casualty Insurance Company
 progressive
 
-// promo : 2014-12-18 Afilias Limited
+// promo : 2014-12-18 Identity Digital Limited
 promo
 
 // properties : 2013-12-05 Binky Moon, LLC
 properties
 
-// property : 2014-05-22 UNR Corp.
+// property : 2014-05-22 Internet Naming Company LLC
 property
 
 // protection : 2015-04-23 XYZ.COM LLC
@@ -9794,18 +9816,12 @@
 // quest : 2015-03-26 XYZ.COM LLC
 quest
 
-// qvc : 2015-07-30 QVC, Inc.
-qvc
-
 // racing : 2014-12-04 Premier Registry Limited
 racing
 
 // radio : 2016-07-21 European Broadcasting Union (EBU)
 radio
 
-// raid : 2015-07-23 Johnson Shareholdings, Inc.
-raid
-
 // read : 2014-12-18 Amazon Registry Services, Inc.
 read
 
@@ -9821,7 +9837,7 @@
 // recipes : 2013-10-17 Binky Moon, LLC
 recipes
 
-// red : 2013-11-07 Afilias Limited
+// red : 2013-11-07 Identity Digital Limited
 red
 
 // redstone : 2014-10-31 Redstone Haute Couture Co., Ltd.
@@ -9896,9 +9912,6 @@
 // rip : 2014-07-10 Dog Beach, LLC
 rip
 
-// rmit : 2015-11-19 Royal Melbourne Institute of Technology
-rmit
-
 // rocher : 2014-12-18 Ferrero Trading Lux S.A.
 rocher
 
@@ -9920,7 +9933,7 @@
 // rugby : 2016-12-15 World Rugby Strategic Developments Limited
 rugby
 
-// ruhr : 2013-10-02 regiodot GmbH & Co. KG
+// ruhr : 2013-10-02 dotSaarland GmbH
 ruhr
 
 // run : 2015-03-19 Binky Moon, LLC
@@ -10013,9 +10026,6 @@
 // science : 2014-09-11 dot Science Limited
 science
 
-// scjohnson : 2015-07-23 Johnson Shareholdings, Inc.
-scjohnson
-
 // scot : 2014-01-23 Dot Scot Registry Limited
 scot
 
@@ -10055,7 +10065,7 @@
 // sex : 2014-11-13 ICM Registry SX LLC
 sex
 
-// sexy : 2013-09-11 UNR Corp.
+// sexy : 2013-09-11 Internet Naming Company LLC
 sexy
 
 // sfr : 2015-08-13 Societe Francaise du Radiotelephone - SFR
@@ -10076,7 +10086,7 @@
 // shia : 2014-09-04 Asia Green IT System Bilgisayar San. ve Tic. Ltd. Sti.
 shia
 
-// shiksha : 2013-11-14 Afilias Limited
+// shiksha : 2013-11-14 Identity Digital Limited
 shiksha
 
 // shoes : 2013-10-02 Binky Moon, LLC
@@ -10109,7 +10119,7 @@
 // site : 2015-01-15 Radix FZC
 site
 
-// ski : 2015-04-09 Afilias Limited
+// ski : 2015-04-09 Identity Digital Limited
 ski
 
 // skin : 2015-01-15 XYZ.COM LLC
@@ -10214,7 +10224,7 @@
 // studio : 2015-02-11 Dog Beach, LLC
 studio
 
-// study : 2014-12-11 OPEN UNIVERSITIES AUSTRALIA PTY LTD
+// study : 2014-12-11 Registry Services, LLC
 study
 
 // style : 2014-12-04 Binky Moon, LLC
@@ -10244,9 +10254,6 @@
 // swatch : 2015-01-08 The Swatch Group Ltd
 swatch
 
-// swiftcover : 2015-07-23 Swiftcover Insurance Services Limited
-swiftcover
-
 // swiss : 2014-10-16 Swiss Confederation
 swiss
 
@@ -10277,7 +10284,7 @@
 // tatar : 2014-04-24 Limited Liability Company "Coordination Center of Regional Domain of Tatarstan Republic"
 tatar
 
-// tattoo : 2013-08-30 UNR Corp.
+// tattoo : 2013-08-30 Top Level Design, LLC
 tattoo
 
 // tax : 2014-03-20 Binky Moon, LLC
@@ -10370,7 +10377,7 @@
 // toshiba : 2014-04-10 TOSHIBA Corporation
 toshiba
 
-// total : 2015-08-06 Total SA
+// total : 2015-08-06 TOTAL SE
 total
 
 // tours : 2015-01-22 Binky Moon, LLC
@@ -10406,7 +10413,7 @@
 // travelersinsurance : 2015-03-26 Travelers TLD, LLC
 travelersinsurance
 
-// trust : 2014-10-16 UNR Corp.
+// trust : 2014-10-16 Internet Naming Company LLC
 trust
 
 // trv : 2015-03-26 Travelers TLD, LLC
@@ -10553,7 +10560,7 @@
 // watch : 2013-11-14 Binky Moon, LLC
 watch
 
-// watches : 2014-12-22 Afilias Limited
+// watches : 2014-12-22 Identity Digital Limited
 watches
 
 // weather : 2015-01-08 International Business Machines Corporation
@@ -10664,9 +10671,6 @@
 // xn--3ds443g : 2013-09-08 TLD REGISTRY LIMITED OY
 xn--3ds443g
 
-// xn--3oq18vl8pn36a : 2015-07-02 Volkswagen (China) Investment Co., Ltd.
-xn--3oq18vl8pn36a
-
 // xn--3pxu8k : 2015-01-15 VeriSign Sarl
 xn--3pxu8k
 
@@ -10676,7 +10680,7 @@
 // xn--45q11c : 2013-11-21 Zodiac Gemini Ltd
 xn--45q11c
 
-// xn--4gbrim : 2013-10-04 Fans TLD Limited
+// xn--4gbrim : 2013-10-04 Helium TLDs Ltd
 xn--4gbrim
 
 // xn--55qw42g : 2013-11-08 China Organizational Name Administration Center
@@ -10691,7 +10695,7 @@
 // xn--5tzm5g : 2014-12-22 Global Website TLD Asia Limited
 xn--5tzm5g
 
-// xn--6frz82g : 2013-09-23 Afilias Limited
+// xn--6frz82g : 2013-09-23 Identity Digital Limited
 xn--6frz82g
 
 // xn--6qq986b3xl : 2013-09-13 Tycoon Treasure Limited
@@ -10998,6 +11002,10 @@
 // Submitted by accesso Team <accessoecommerce@accesso.com>
 *.devcdnaccesso.com
 
+// Acorn Labs : https://acorn.io
+// Submitted by Craig Jellick <domains@acorn.io>
+*.on-acorn.io
+
 // Adobe : https://www.adobe.com/
 // Submitted by Ian Boston <boston@adobe.com> and Lars Trieloff <trieloff@adobe.com>
 adobeaemcloud.com
@@ -11011,6 +11019,16 @@
 // Submitted by Przemyslaw Plewa <it-admin@domena.pl>
 beep.pl
 
+// Airkit : https://www.airkit.com/
+// Submitted by Grant Cooksey <security@airkit.com>
+airkitapps.com
+airkitapps-au.com
+airkitapps.eu
+
+// Aiven: https://aiven.io/
+// Submitted by Etienne Stalmans <security@aiven.io>
+aivencloud.com
+
 // alboto.ca : http://alboto.ca
 // Submitted by Anton Avramov <avramov@alboto.ca>
 barsy.ca
@@ -11032,19 +11050,134 @@
 // Submitted by Cyril <admin@alwaysdata.com>
 alwaysdata.net
 
-// Amazon CloudFront : https://aws.amazon.com/cloudfront/
+// Amaze Software : https://amaze.co
+// Submitted by Domain Admin <domainadmin@amaze.co>
+myamaze.net
+
+// Amazon : https://www.amazon.com/
+// Submitted by AWS Security <psl-maintainers@amazon.com>
+// Subsections of Amazon/subsidiaries will appear until "concludes" tag
+
+// Amazon CloudFront
 // Submitted by Donavan Miller <donavanm@amazon.com>
+// Reference: 54144616-fd49-4435-8535-19c6a601bdb3
 cloudfront.net
 
-// Amazon Elastic Compute Cloud : https://aws.amazon.com/ec2/
+// Amazon EC2
 // Submitted by Luke Wells <psl-maintainers@amazon.com>
+// Reference: 4c38fa71-58ac-4768-99e5-689c1767e537
 *.compute.amazonaws.com
 *.compute-1.amazonaws.com
 *.compute.amazonaws.com.cn
 us-east-1.amazonaws.com
 
-// Amazon Elastic Beanstalk : https://aws.amazon.com/elasticbeanstalk/
+// Amazon S3
 // Submitted by Luke Wells <psl-maintainers@amazon.com>
+// Reference: d068bd97-f0a9-4838-a6d8-954b622ef4ae
+s3.cn-north-1.amazonaws.com.cn
+s3.dualstack.ap-northeast-1.amazonaws.com
+s3.dualstack.ap-northeast-2.amazonaws.com
+s3.ap-northeast-2.amazonaws.com
+s3-website.ap-northeast-2.amazonaws.com
+s3.dualstack.ap-south-1.amazonaws.com
+s3.ap-south-1.amazonaws.com
+s3-website.ap-south-1.amazonaws.com
+s3.dualstack.ap-southeast-1.amazonaws.com
+s3.dualstack.ap-southeast-2.amazonaws.com
+s3.dualstack.ca-central-1.amazonaws.com
+s3.ca-central-1.amazonaws.com
+s3-website.ca-central-1.amazonaws.com
+s3.dualstack.eu-central-1.amazonaws.com
+s3.eu-central-1.amazonaws.com
+s3-website.eu-central-1.amazonaws.com
+s3.dualstack.eu-west-1.amazonaws.com
+s3.dualstack.eu-west-2.amazonaws.com
+s3.eu-west-2.amazonaws.com
+s3-website.eu-west-2.amazonaws.com
+s3.dualstack.eu-west-3.amazonaws.com
+s3.eu-west-3.amazonaws.com
+s3-website.eu-west-3.amazonaws.com
+s3.amazonaws.com
+s3-ap-northeast-1.amazonaws.com
+s3-ap-northeast-2.amazonaws.com
+s3-ap-south-1.amazonaws.com
+s3-ap-southeast-1.amazonaws.com
+s3-ap-southeast-2.amazonaws.com
+s3-ca-central-1.amazonaws.com
+s3-eu-central-1.amazonaws.com
+s3-eu-west-1.amazonaws.com
+s3-eu-west-2.amazonaws.com
+s3-eu-west-3.amazonaws.com
+s3-external-1.amazonaws.com
+s3-fips-us-gov-west-1.amazonaws.com
+s3-sa-east-1.amazonaws.com
+s3-us-east-2.amazonaws.com
+s3-us-gov-west-1.amazonaws.com
+s3-us-west-1.amazonaws.com
+s3-us-west-2.amazonaws.com
+s3-website-ap-northeast-1.amazonaws.com
+s3-website-ap-southeast-1.amazonaws.com
+s3-website-ap-southeast-2.amazonaws.com
+s3-website-eu-west-1.amazonaws.com
+s3-website-sa-east-1.amazonaws.com
+s3-website-us-east-1.amazonaws.com
+s3-website-us-west-1.amazonaws.com
+s3-website-us-west-2.amazonaws.com
+s3.dualstack.sa-east-1.amazonaws.com
+s3.dualstack.us-east-1.amazonaws.com
+s3.dualstack.us-east-2.amazonaws.com
+s3.us-east-2.amazonaws.com
+s3-website.us-east-2.amazonaws.com
+
+// AWS Cloud9
+// Submitted by: AWS Security <psl-maintainers@amazon.com>
+// Reference: 2b6dfa9a-3a7f-4367-b2e7-0321e77c0d59
+vfs.cloud9.af-south-1.amazonaws.com
+webview-assets.cloud9.af-south-1.amazonaws.com
+vfs.cloud9.ap-east-1.amazonaws.com
+webview-assets.cloud9.ap-east-1.amazonaws.com
+vfs.cloud9.ap-northeast-1.amazonaws.com
+webview-assets.cloud9.ap-northeast-1.amazonaws.com
+vfs.cloud9.ap-northeast-2.amazonaws.com
+webview-assets.cloud9.ap-northeast-2.amazonaws.com
+vfs.cloud9.ap-northeast-3.amazonaws.com
+webview-assets.cloud9.ap-northeast-3.amazonaws.com
+vfs.cloud9.ap-south-1.amazonaws.com
+webview-assets.cloud9.ap-south-1.amazonaws.com
+vfs.cloud9.ap-southeast-1.amazonaws.com
+webview-assets.cloud9.ap-southeast-1.amazonaws.com
+vfs.cloud9.ap-southeast-2.amazonaws.com
+webview-assets.cloud9.ap-southeast-2.amazonaws.com
+vfs.cloud9.ca-central-1.amazonaws.com
+webview-assets.cloud9.ca-central-1.amazonaws.com
+vfs.cloud9.eu-central-1.amazonaws.com
+webview-assets.cloud9.eu-central-1.amazonaws.com
+vfs.cloud9.eu-north-1.amazonaws.com
+webview-assets.cloud9.eu-north-1.amazonaws.com
+vfs.cloud9.eu-south-1.amazonaws.com
+webview-assets.cloud9.eu-south-1.amazonaws.com
+vfs.cloud9.eu-west-1.amazonaws.com
+webview-assets.cloud9.eu-west-1.amazonaws.com
+vfs.cloud9.eu-west-2.amazonaws.com
+webview-assets.cloud9.eu-west-2.amazonaws.com
+vfs.cloud9.eu-west-3.amazonaws.com
+webview-assets.cloud9.eu-west-3.amazonaws.com
+vfs.cloud9.me-south-1.amazonaws.com
+webview-assets.cloud9.me-south-1.amazonaws.com
+vfs.cloud9.sa-east-1.amazonaws.com
+webview-assets.cloud9.sa-east-1.amazonaws.com
+vfs.cloud9.us-east-1.amazonaws.com
+webview-assets.cloud9.us-east-1.amazonaws.com
+vfs.cloud9.us-east-2.amazonaws.com
+webview-assets.cloud9.us-east-2.amazonaws.com
+vfs.cloud9.us-west-1.amazonaws.com
+webview-assets.cloud9.us-west-1.amazonaws.com
+vfs.cloud9.us-west-2.amazonaws.com
+webview-assets.cloud9.us-west-2.amazonaws.com
+
+// AWS Elastic Beanstalk
+// Submitted by Luke Wells <psl-maintainers@amazon.com>
+// Reference: aa202394-43a0-4857-b245-8db04549137e
 cn-north-1.eb.amazonaws.com.cn
 cn-northwest-1.eb.amazonaws.com.cn
 elasticbeanstalk.com
@@ -11066,75 +11199,24 @@
 us-west-1.elasticbeanstalk.com
 us-west-2.elasticbeanstalk.com
 
-// Amazon Elastic Load Balancing : https://aws.amazon.com/elasticloadbalancing/
+// (AWS) Elastic Load Balancing
 // Submitted by Luke Wells <psl-maintainers@amazon.com>
-*.elb.amazonaws.com
+// Reference: 12a3d528-1bac-4433-a359-a395867ffed2
 *.elb.amazonaws.com.cn
+*.elb.amazonaws.com
 
-// Amazon Global Accelerator : https://aws.amazon.com/global-accelerator/
+// AWS Global Accelerator
 // Submitted by Daniel Massaguer <psl-maintainers@amazon.com>
+// Reference: d916759d-a08b-4241-b536-4db887383a6a
 awsglobalaccelerator.com
 
-// Amazon S3 : https://aws.amazon.com/s3/
-// Submitted by Luke Wells <psl-maintainers@amazon.com>
-s3.amazonaws.com
-s3-ap-northeast-1.amazonaws.com
-s3-ap-northeast-2.amazonaws.com
-s3-ap-south-1.amazonaws.com
-s3-ap-southeast-1.amazonaws.com
-s3-ap-southeast-2.amazonaws.com
-s3-ca-central-1.amazonaws.com
-s3-eu-central-1.amazonaws.com
-s3-eu-west-1.amazonaws.com
-s3-eu-west-2.amazonaws.com
-s3-eu-west-3.amazonaws.com
-s3-external-1.amazonaws.com
-s3-fips-us-gov-west-1.amazonaws.com
-s3-sa-east-1.amazonaws.com
-s3-us-gov-west-1.amazonaws.com
-s3-us-east-2.amazonaws.com
-s3-us-west-1.amazonaws.com
-s3-us-west-2.amazonaws.com
-s3.ap-northeast-2.amazonaws.com
-s3.ap-south-1.amazonaws.com
-s3.cn-north-1.amazonaws.com.cn
-s3.ca-central-1.amazonaws.com
-s3.eu-central-1.amazonaws.com
-s3.eu-west-2.amazonaws.com
-s3.eu-west-3.amazonaws.com
-s3.us-east-2.amazonaws.com
-s3.dualstack.ap-northeast-1.amazonaws.com
-s3.dualstack.ap-northeast-2.amazonaws.com
-s3.dualstack.ap-south-1.amazonaws.com
-s3.dualstack.ap-southeast-1.amazonaws.com
-s3.dualstack.ap-southeast-2.amazonaws.com
-s3.dualstack.ca-central-1.amazonaws.com
-s3.dualstack.eu-central-1.amazonaws.com
-s3.dualstack.eu-west-1.amazonaws.com
-s3.dualstack.eu-west-2.amazonaws.com
-s3.dualstack.eu-west-3.amazonaws.com
-s3.dualstack.sa-east-1.amazonaws.com
-s3.dualstack.us-east-1.amazonaws.com
-s3.dualstack.us-east-2.amazonaws.com
-s3-website-us-east-1.amazonaws.com
-s3-website-us-west-1.amazonaws.com
-s3-website-us-west-2.amazonaws.com
-s3-website-ap-northeast-1.amazonaws.com
-s3-website-ap-southeast-1.amazonaws.com
-s3-website-ap-southeast-2.amazonaws.com
-s3-website-eu-west-1.amazonaws.com
-s3-website-sa-east-1.amazonaws.com
-s3-website.ap-northeast-2.amazonaws.com
-s3-website.ap-south-1.amazonaws.com
-s3-website.ca-central-1.amazonaws.com
-s3-website.eu-central-1.amazonaws.com
-s3-website.eu-west-2.amazonaws.com
-s3-website.eu-west-3.amazonaws.com
-s3-website.us-east-2.amazonaws.com
+// eero
+// Submitted by Yue Kang <eero-dynamic-dns@amazon.com>
+// Reference: 264afe70-f62c-4c02-8ab9-b5281ed24461
+eero.online
+eero-stage.online
 
-// Amsterdam Wireless: https://www.amsterdamwireless.nl/
-// Submitted by Imre Jonk <hostmaster@amsterdamwireless.nl>
-amsw.nl
+// concludes Amazon
 
 // Amune : https://amune.org/
 // Submitted by Team Amune <cert@amune.org>
@@ -11145,6 +11227,10 @@
 // Submitted by Apigee Security Team <security@apigee.com>
 apigee.io
 
+// Apphud : https://apphud.com
+// Submitted by Alexander Selivanov <alex@apphud.com>
+siiites.com
+
 // Appspace : https://www.appspace.com
 // Submitted by Appspace Security Team <security@appspace.com>
 appspacehosted.com
@@ -11183,6 +11269,10 @@
 // Submitted by Sam Smyth <devloop@atlassian.com>
 cdn.prod.atlassian-dev.net
 
+// Authentick UG (haftungsbeschränkt) : https://authentick.net
+// Submitted by Lukas Reschke <lukas@authentick.net>
+translated.page
+
 // AVM : https://avm.de
 // Submitted by Andreas Weise <a.weise@avm.de>
 myfritz.net
@@ -11196,6 +11286,10 @@
 *.awdev.ca
 *.advisor.ws
 
+// AZ.pl sp. z.o.o: https://az.pl
+// Submitted by Krzysztof Wolski <krzysztof.wolski@home.eu>
+ecommerce-shop.pl
+
 // b-data GmbH : https://www.b-data.io
 // Submitted by Olivier Benz <olivier.benz@b-data.ch>
 b-data.io
@@ -11219,6 +11313,26 @@
 app.banzaicloud.io
 *.backyards.banzaicloud.io
 
+// BASE, Inc. : https://binc.jp
+// Submitted by Yuya NAGASAWA <public-suffix-list@binc.jp>
+base.ec
+official.ec
+buyshop.jp
+fashionstore.jp
+handcrafted.jp
+kawaiishop.jp
+supersale.jp
+theshop.jp
+shopselect.net
+base.shop
+
+// BeagleBoard.org Foundation : https://beagleboard.org
+// Submitted by Jason Kridner <jkridner@beagleboard.org>
+beagleboard.io
+
+// Beget Ltd
+// Submitted by Lev Nekrasov <lnekrasov@beget.com>
+*.beget.app
 
 // BetaInABox
 // Submitted by Adrian <adrian@betainabox.com>
@@ -11321,7 +11435,6 @@
 // No longer operated by CentralNic, these entries should be adopted and/or removed by current operators
 // Submitted by Gavin Brown <gavin.brown@centralnic.com>
 ar.com
-gb.com
 hu.com
 kr.com
 no.com
@@ -11375,25 +11488,19 @@
 discourse.group
 discourse.team
 
-// ClearVox : http://www.clearvox.nl/
-// Submitted by Leon Rowland <leon@clearvox.nl>
-virtueeldomein.nl
-
 // Clever Cloud : https://www.clever-cloud.com/
 // Submitted by Quentin Adam <noc@clever-cloud.com>
 cleverapps.io
 
 // Clerk : https://www.clerk.dev
 // Submitted by Colin Sidoti <systems@clerk.dev>
+clerk.app
+clerkstage.app
 *.lcl.dev
 *.lclstage.dev
 *.stg.dev
 *.stgstage.dev
 
-// Clic2000 : https://clic2000.fr
-// Submitted by Mathilde Blanchemanche <mathilde@clic2000.fr>
-clic2000.net
-
 // ClickRising : https://clickrising.com/
 // Submitted by Umut Gumeli <infrastructure-publicsuffixlist@clickrising.com>
 clickrising.net
@@ -11418,8 +11525,8 @@
 cloudcontrolapp.com
 
 // Cloudera, Inc. : https://www.cloudera.com/
-// Submitted by Philip Langdale <security@cloudera.com>
-cloudera.site
+// Submitted by Kedarnath Waikar <security@cloudera.com>
+*.cloudera.site
 
 // Cloudflare, Inc. : https://www.cloudflare.com/
 // Submitted by Cloudflare Team <publicsuffixlist@cloudflare.com>
@@ -11468,6 +11575,10 @@
 // Submitted by Angelo Gladding <angelo@lahacker.net>
 cnpy.gdn
 
+// Codeberg e. V. : https://codeberg.org
+// Submitted by Moritz Marquardt <git@momar.de>
+codeberg.page
+
 // CoDNS B.V.
 co.nl
 co.no
@@ -11594,6 +11705,21 @@
 // Submitted by Peter Thomassen <peter@desec.io>
 dedyn.io
 
+// Deta: https://www.deta.sh/
+// Submitted by Aavash Shrestha <aavash@deta.sh>
+deta.app
+deta.dev
+
+// Diher Solutions : https://diher.solutions
+// Submitted by Didi Hermawan <mail@diher.solutions>
+*.rss.my.id
+*.diher.solutions
+
+// Discord Inc : https://discord.com
+// Submitted by Sahn Lam <slam@discordapp.com>
+discordsays.com
+discordsez.com
+
 // DNS Africa Ltd https://dns.business
 // Submitted by Calvin Browne <calvin@dns.business>
 jozi.biz
@@ -11942,10 +12068,14 @@
 definima.net
 definima.io
 
-// DigitalOcean : https://digitalocean.com/
-// Submitted by Braxton Huggins <bhuggins@digitalocean.com>
+// DigitalOcean App Platform : https://www.digitalocean.com/products/app-platform/
+// Submitted by Braxton Huggins <psl-maintainers@digitalocean.com>
 ondigitalocean.app
 
+// DigitalOcean Spaces : https://www.digitalocean.com/products/spaces/
+// Submitted by Robin H. Johnson <psl-maintainers@digitalocean.com>
+*.digitaloceanspaces.com
+
 // dnstrace.pro : https://dnstrace.pro/
 // Submitted by Chris Partridge <chris@partridge.tech>
 bci.dnstrace.pro
@@ -11978,10 +12108,10 @@
 // Submitted by Vladimir Dudr <info@e4you.cz>
 e4.cz
 
-// eero : https://eero.com/
-// Submitted by Yue Kang <eero-dynamic-dns@amazon.com>
-eero.online
-eero-stage.online
+// Easypanel : https://easypanel.io
+// Submitted by Andrei Canta <andrei@easypanel.io>
+easypanel.app
+easypanel.host
 
 // Elementor : Elementor Ltd.
 // Submitted by Anton Barkan <antonb@elementor.com>
@@ -11997,19 +12127,19 @@
 mytuleap.com
 tuleap-partners.com
 
+// Encoretivity AB: https://encore.dev
+// Submitted by André Eriksson <andre@encore.dev>
+encr.app
+encoreapi.com
+
 // ECG Robotics, Inc: https://ecgrobotics.org
 // Submitted by <frc1533@ecgrobotics.org>
 onred.one
 staging.onred.one
 
-// One.com: https://www.one.com/
-// Submitted by Jacob Bunk Nielsen <jbn@one.com>
-service.one
-
-// Enonic : http://enonic.com/
-// Submitted by Erik Kaareng-Sunde <esu@enonic.com>
-enonic.io
-customer.enonic.io
+// encoway GmbH : https://www.encoway.de
+// Submitted by Marcel Daus <cloudops@encoway.de>
+eu.encoway.cloud
 
 // EU.org https://eu.org/
 // Submitted by Pierre Beyssac <hostmaster@eu.org>
@@ -12196,6 +12326,10 @@
 b.ssl.fastly.net
 global.ssl.fastly.net
 
+// Fastmail : https://www.fastmail.com/
+// Submitted by Marc Bradshaw <marc@fastmailteam.com>
+*.user.fm
+
 // FASTVPS EESTI OU : https://fastvps.ru/
 // Submitted by Likhachev Vasiliy <lihachev@fastvps.ru>
 fastvps-server.com
@@ -12214,8 +12348,6 @@
 
 // FearWorks Media Ltd. : https://fearworksmedia.co.uk
 // submitted by Keith Fairley <domains@fearworksmedia.co.uk>
-couk.me
-ukco.me
 conn.uk
 copro.uk
 hosp.uk
@@ -12250,6 +12382,11 @@
 // Submitted by Louis Chemineau <louis@chmn.me>
 flap.id
 
+// FlashDrive : https://flashdrive.io
+// Submitted by Eric Chan <support@flashdrive.io>
+onflashdrive.app
+fldrv.com
+
 // fly.io: https://fly.io
 // Submitted by Kurt Mackey <kurt@fly.io>
 fly.dev
@@ -12269,6 +12406,10 @@
 // Submitted by Koen Rouwhorst <koenrh@framer.com>
 framer.app
 framercanvas.com
+framer.media
+framer.photos
+framer.website
+framer.wiki
 
 // Frusky MEDIA&PR : https://www.frusky.de
 // Submitted by Victor Pupynin <hallo@frusky.de>
@@ -12314,10 +12455,22 @@
 *.kunden.ortsinfo.at
 *.statics.cloud
 
-// GDS : https://www.gov.uk/service-manual/operations/operating-servicegovuk-subdomains
-// Submitted by David Illsley <david.illsley@digital.cabinet-office.gov.uk>
+// GDS : https://www.gov.uk/service-manual/technology/managing-domain-names
+// Submitted by Stephen Ford <hostmaster@digital.cabinet-office.gov.uk>
+independent-commission.uk
+independent-inquest.uk
+independent-inquiry.uk
+independent-panel.uk
+independent-review.uk
+public-inquiry.uk
+royal-commission.uk
+campaign.gov.uk
 service.gov.uk
 
+// CDDO : https://www.gov.uk/guidance/get-an-api-domain-on-govuk
+// Submitted by Jamie Tanna <jamie.tanna@digital.cabinet-office.gov.uk>
+api.gov.uk
+
 // Gehirn Inc. : https://www.gehirn.co.jp/
 // Submitted by Kohei YOSHIDA <tech@gehirn.co.jp>
 gehirn.ne.jp
@@ -12367,8 +12520,114 @@
 shop.ro
 
 // GMO Pepabo, Inc. : https://pepabo.com/
-// Submitted by dojineko <admin@pepabo.com>
+// Submitted by Hosting Div <admin@pepabo.com>
 lolipop.io
+angry.jp
+babyblue.jp
+babymilk.jp
+backdrop.jp
+bambina.jp
+bitter.jp
+blush.jp
+boo.jp
+boy.jp
+boyfriend.jp
+but.jp
+candypop.jp
+capoo.jp
+catfood.jp
+cheap.jp
+chicappa.jp
+chillout.jp
+chips.jp
+chowder.jp
+chu.jp
+ciao.jp
+cocotte.jp
+coolblog.jp
+cranky.jp
+cutegirl.jp
+daa.jp
+deca.jp
+deci.jp
+digick.jp
+egoism.jp
+fakefur.jp
+fem.jp
+flier.jp
+floppy.jp
+fool.jp
+frenchkiss.jp
+girlfriend.jp
+girly.jp
+gloomy.jp
+gonna.jp
+greater.jp
+hacca.jp
+heavy.jp
+her.jp
+hiho.jp
+hippy.jp
+holy.jp
+hungry.jp
+icurus.jp
+itigo.jp
+jellybean.jp
+kikirara.jp
+kill.jp
+kilo.jp
+kuron.jp
+littlestar.jp
+lolipopmc.jp
+lolitapunk.jp
+lomo.jp
+lovepop.jp
+lovesick.jp
+main.jp
+mods.jp
+mond.jp
+mongolian.jp
+moo.jp
+namaste.jp
+nikita.jp
+nobushi.jp
+noor.jp
+oops.jp
+parallel.jp
+parasite.jp
+pecori.jp
+peewee.jp
+penne.jp
+pepper.jp
+perma.jp
+pigboat.jp
+pinoko.jp
+punyu.jp
+pupu.jp
+pussycat.jp
+pya.jp
+raindrop.jp
+readymade.jp
+sadist.jp
+schoolbus.jp
+secret.jp
+staba.jp
+stripper.jp
+sub.jp
+sunnyday.jp
+thick.jp
+tonkotsu.jp
+under.jp
+upper.jp
+velvet.jp
+verse.jp
+versus.jp
+vivian.jp
+watson.jp
+weblike.jp
+whitesnow.jp
+zombie.jp
+heteml.net
 
 // GOV.UK Platform as a Service : https://www.cloud.service.gov.uk/
 // Submitted by Tom Whitwell <gov-uk-paas-support@digital.cabinet-office.gov.uk>
@@ -12409,6 +12668,7 @@
 *.gateway.dev
 cloud.goog
 translate.goog
+*.usercontent.goog
 cloudfunctions.net
 blogspot.ae
 blogspot.al
@@ -12489,6 +12749,10 @@
 // Submitted by Niels Martignene <hello@goupile.fr>
 goupile.fr
 
+// Government of the Netherlands: https://www.government.nl
+// Submitted by <domeinnaam@minaz.nl>
+gov.nl
+
 // Group 53, LLC : https://www.group53.com
 // Submitted by Tyler Todd <noc@nova53.net>
 awsmppl.com
@@ -12499,7 +12763,7 @@
 xn--gnstigliefern-wob.de
 
 // Hakaran group: http://hakaran.cz
-// Submited by Arseniy Sokolov <security@hakaran.cz>
+// Submitted by Arseniy Sokolov <security@hakaran.cz>
 fin.ci
 free.hr
 caa.li
@@ -12519,6 +12783,10 @@
 hasura.app
 hasura-app.io
 
+// Heilbronn University of Applied Sciences - Faculty Informatics (GitLab Pages): https://www.hs-heilbronn.de
+// Submitted by Richard Zowalla <mi-admin@hs-heilbronn.de>
+pages.it.hs-heilbronn.de
+
 // Hepforge : https://www.hepforge.org
 // Submitted by David Grellscheid <admin@hepforge.org>
 hepforge.org
@@ -12530,16 +12798,25 @@
 
 // Hibernating Rhinos
 // Submitted by Oren Eini <oren@ravendb.net>
-myravendb.com
+ravendb.cloud
 ravendb.community
 ravendb.me
 development.run
 ravendb.run
 
+// home.pl S.A.: https://home.pl
+// Submitted by Krzysztof Wolski <krzysztof.wolski@home.eu>
+homesklep.pl
+
 // Hong Kong Productivity Council: https://www.hkpc.org/
 // Submitted by SECaaS Team <summchan@hkpc.org>
 secaas.hk
 
+// Hoplix : https://www.hoplix.com
+// Submitted by Danilo De Franco<info@hoplix.shop>
+hoplix.shop
+
+
 // HOSTBIP REGISTRY : https://www.hostbip.com/
 // Submitted by Atanunu Igbunuroghene <publicsuffixlist@hostbip.com>
 orx.biz
@@ -12551,7 +12828,6 @@
 ngo.ng
 edu.scot
 sch.so
-org.yt
 
 // HostyHosting (hostyhosting.com)
 hostyhosting.io
@@ -12569,6 +12845,11 @@
 // Submitted by Hannu Aronsson <haa@iki.fi>
 iki.fi
 
+// iliad italia: https://www.iliad.it
+// Submitted by Marios Makassikis <mmakassikis@freebox.fr>
+ibxos.it
+iliadboxos.it
+
 // Impertrix Solutions : <https://impertrixcdn.com>
 // Submitted by Zhixiang Zhao <csuite@impertrix.com>
 impertrixcdn.com
@@ -12638,7 +12919,7 @@
 pixolino.com
 
 // Internet-Pro, LLP: https://netangels.ru/
-// Submited by Vasiliy Sheredeko <piphon@gmail.com>
+// Submitted by Vasiliy Sheredeko <piphon@gmail.com>
 na4u.ru
 
 // iopsys software solutions AB : https://iopsys.eu/
@@ -12649,9 +12930,11 @@
 // Submitted by Matthew Hardeman <mhardeman@ipifony.com>
 ipifony.net
 
-// IServ GmbH : https://iserv.eu
-// Submitted by Kim-Alexander Brodowski <info@iserv.eu>
+// IServ GmbH : https://iserv.de
+// Submitted by Mario Hoberg <info@iserv.de>
+iservschule.de
 mein-iserv.de
+schulplattform.de
 schulserver.de
 test-iserv.de
 iserv.dev
@@ -12661,7 +12944,7 @@
 iobb.net
 
 // Jelastic, Inc. : https://jelastic.com/
-// Submited by Ihor Kolodyuk <ik@jelastic.com>
+// Submitted by Ihor Kolodyuk <ik@jelastic.com>
 mel.cloudlets.com.au
 cloud.interhostsolutions.be
 users.scale.virtualcloud.com.br
@@ -12772,6 +13055,14 @@
 kaas.gg
 khplay.nl
 
+// Kakao : https://www.kakaocorp.com/
+// Submitted by JaeYoong Lee <cec@kakaocorp.com>
+ktistory.com
+
+// Kapsi : https://kapsi.fi
+// Submitted by Tomi Juntunen <erani@kapsi.fi>
+kapsi.fi
+
 // Keyweb AG : https://www.keyweb.de
 // Submitted by Martin Dannehl <postmaster@keymachine.de>
 keymachine.de
@@ -12785,6 +13076,10 @@
 // Submitted by Roy Keene <rkeene@knightpoint.com>
 knightpoint.systems
 
+// KoobinEvent, SL: https://www.koobin.com
+// Submitted by Iván Oliva <ivan.oliva@koobin.com>
+koobin.events
+
 // KUROKU LTD : https://kuroku.ltd/
 // Submitted by DisposaBoy <security@oya.to>
 oya.to
@@ -12843,11 +13138,16 @@
 members.linode.com
 *.nodebalancer.linode.com
 *.linodeobjects.com
+ip.linodeusercontent.com
 
 // LiquidNet Ltd : http://www.liquidnetlimited.com/
 // Submitted by Victor Velchev <admin@liquidnetlimited.com>
 we.bs
 
+// Localcert : https://localcert.dev
+// Submitted by Lann Martin <security@localcert.dev>
+*.user.localcert.dev
+
 // localzone.xyz
 // Submitted by Kenny Niehage <hello@yahe.sh>
 localzone.xyz
@@ -12860,6 +13160,10 @@
 loginline.services
 loginline.site
 
+// Lokalized : https://lokalized.nl
+// Submitted by Noah Taheij <noah@lokalized.nl>
+servers.run
+
 // Lõhmus Family, The
 // Submitted by Heiki Lõhmus <hostmaster at lohmus dot me>
 lohmus.me
@@ -12900,6 +13204,7 @@
 barsy.org
 barsy.pro
 barsy.pub
+barsy.ro
 barsy.shop
 barsy.site
 barsy.support
@@ -12951,6 +13256,10 @@
 miniserver.com
 memset.net
 
+// Messerli Informatik AG : https://www.messerli.ch/
+// Submitted by Ruben Schmidmeister <psl-maintainers@messerli.ch>
+messerli.app
+
 // MetaCentrum, CESNET z.s.p.o. : https://www.metacentrum.cz/en/
 // Submitted by Zdeněk Šustr <zdenek.sustr@cesnet.cz>
 *.cloud.metacentrum.cz
@@ -12970,12 +13279,14 @@
 co.pl
 
 // Microsoft Corporation : http://microsoft.com
-// Submitted by Mitch Webster <miwebst@microsoft.com>
+// Submitted by Public Suffix List Admin <msftpsladmin@microsoft.com>
 *.azurecontainer.io
 azurewebsites.net
 azure-mobile.net
 cloudapp.net
 azurestaticapps.net
+1.azurestaticapps.net
+2.azurestaticapps.net
 centralus.azurestaticapps.net
 eastasia.azurestaticapps.net
 eastus2.azurestaticapps.net
@@ -13028,28 +13339,9 @@
 // Submitted by Paulus Schoutsen <infra@nabucasa.com>
 ui.nabu.casa
 
-// Names.of.London : https://names.of.london/
-// Submitted by James Stevens <registryatnames.of.london> or <publiclistatjrcs.net>
-pony.club
-of.fashion
-in.london
-of.london
-from.marketing
-with.marketing
-for.men
-repair.men
-and.mom
-for.mom
-for.one
-under.one
-for.sale
-that.win
-from.work
-to.work
-
-// NCTU.ME : https://nctu.me/
-// Submitted by Tocknicsu <admin@nctu.me>
-nctu.me
+// Net at Work Gmbh : https://www.netatwork.de
+// Submitted by Jan Jaeschke <jan.jaeschke@netatwork.de>
+cloud.nospamproxy.com
 
 // Netlify : https://www.netlify.com
 // Submitted by Jessica Parsons <jessica@netlify.com>
@@ -13079,7 +13371,10 @@
 // Northflank Ltd. : https://northflank.com/
 // Submitted by Marco Suter <marco@northflank.com>
 *.northflank.app
+*.build.run
 *.code.run
+*.database.run
+*.migration.run
 
 // Noticeable : https://noticeable.io
 // Submitted by Laurent Pellegrino <security@noticeable.io>
@@ -13210,11 +13505,6 @@
 // Submitted by Konstantin Nosov <Nosov@nodeart.io>
 stage.nodeart.io
 
-// Nodum B.V. : https://nodum.io/
-// Submitted by Wietse Wind <hello+publicsuffixlist@nodum.io>
-nodum.co
-nodum.io
-
 // Nucleos Inc. : https://nucleos.com
 // Submitted by Piotr Zduniak <piotr@nucleos.com>
 pcloud.host
@@ -13243,6 +13533,29 @@
 // Submitted by Vicary Archangel <vicary@omniwe.com>
 omniwe.site
 
+// One.com: https://www.one.com/
+// Submitted by Jacob Bunk Nielsen <jbn@one.com>
+123hjemmeside.dk
+123hjemmeside.no
+123homepage.it
+123kotisivu.fi
+123minsida.se
+123miweb.es
+123paginaweb.pt
+123sait.ru
+123siteweb.fr
+123webseite.at
+123webseite.de
+123website.be
+123website.ch
+123website.lu
+123website.nl
+service.one
+simplesite.com
+simplesite.com.br
+simplesite.gr
+simplesite.pl
+
 // One Fold Media : http://www.onefoldmedia.com/
 // Submitted by Eddie Jones <eddie@onefoldmedia.com>
 nid.io
@@ -13263,8 +13576,12 @@
 // Submitted by Yngve Pettersen <yngve@opera.com>
 operaunite.com
 
+// Orange : https://www.orange.com
+// Submitted by Alexandre Linte <alexandre.linte@orange.com>
+tech.orange
+
 // Oursky Limited : https://authgear.com/, https://skygear.io/
-// Submited by Authgear Team <hello@authgear.com>, Skygear Developer <hello@skygear.io>
+// Submitted by Authgear Team <hello@authgear.com>, Skygear Developer <hello@skygear.io>
 authgear-staging.com
 authgearapps.com
 skygearapp.com
@@ -13372,6 +13689,10 @@
 // Submitted by Maximilian Schieder <maxi@zeug.co>
 dyn53.io
 
+// Porter : https://porter.run/
+// Submitted by Rudraksh MK <rudi@porter.run>
+onporter.run
+
 // Positive Codes Technology Company : http://co.bn/faq.html
 // Submitted by Zulfais <pc@co.bn>
 co.bn
@@ -13383,6 +13704,10 @@
 mock.pstmn.io
 httpbin.org
 
+//prequalifyme.today : https://prequalifyme.today
+//Submitted by DeepakTiwari deepak@ivylead.io
+prequalifyme.today
+
 // prgmr.com : https://prgmr.com/
 // Submitted by Sarah Newman <owner@prgmr.com>
 xen.prgmr.com
@@ -13433,6 +13758,10 @@
 // Submitted by Scott Claeys <s.claeys@radwebhosting.com>
 cloudsite.builders
 
+// Redgate Software: https://red-gate.com
+// Submitted by Andrew Farries <andrew.farries@red-gate.com>
+instances.spawn.cc
+
 // Redstar Consultants : https://www.redstarconsultants.com/
 // Submitted by Jons Slemmer <jons@redstarconsultants.com>
 instantcloud.cn
@@ -13494,7 +13823,9 @@
 onrender.com
 
 // Repl.it : https://repl.it
-// Submitted by Mason Clayton <mason@repl.it>
+// Submitted by Lincoln Bergeson <lincoln@replit.com>
+firewalledreplit.co
+id.firewalledreplit.co
 repl.co
 id.repl.co
 repl.run
@@ -13525,6 +13856,10 @@
 // Submitted by Jennifer Herting <jchits@rit.edu>
 git-pages.rit.edu
 
+// Rocky Enterprise Software Foundation : https://resf.org
+// Submitted by Neil Hanlon <neil@resf.org>
+rocky.page
+
 // Rusnames Limited: http://rusnames.ru/
 // Submitted by Sergey Zotov <admin@rusnames.ru>
 xn--90amc.xn--p1acf
@@ -13538,6 +13873,12 @@
 xn--90a1af.xn--p1acf
 xn--41a.xn--p1acf
 
+// Salesforce.com, Inc. https://salesforce.com/
+// Submitted by Michael Biven <mbiven@salesforce.com>
+*.builder.code.com
+*.dev-builder.code.com
+*.stg-builder.code.com
+
 // Sandstorm Development Group, Inc. : https://sandcats.io/
 // Submitted by Asheesh Laroia <asheesh@sandstorm.io>
 sandcats.io
@@ -13547,6 +13888,34 @@
 logoip.de
 logoip.com
 
+// Scaleway : https://www.scaleway.com/
+// Submitted by Rémy Léone <rleone@scaleway.com>
+fr-par-1.baremetal.scw.cloud
+fr-par-2.baremetal.scw.cloud
+nl-ams-1.baremetal.scw.cloud
+fnc.fr-par.scw.cloud
+functions.fnc.fr-par.scw.cloud
+k8s.fr-par.scw.cloud
+nodes.k8s.fr-par.scw.cloud
+s3.fr-par.scw.cloud
+s3-website.fr-par.scw.cloud
+whm.fr-par.scw.cloud
+priv.instances.scw.cloud
+pub.instances.scw.cloud
+k8s.scw.cloud
+k8s.nl-ams.scw.cloud
+nodes.k8s.nl-ams.scw.cloud
+s3.nl-ams.scw.cloud
+s3-website.nl-ams.scw.cloud
+whm.nl-ams.scw.cloud
+k8s.pl-waw.scw.cloud
+nodes.k8s.pl-waw.scw.cloud
+s3.pl-waw.scw.cloud
+s3-website.pl-waw.scw.cloud
+scalebook.scw.cloud
+smartlabeling.scw.cloud
+dedibox.fr
+
 // schokokeks.org GbR : https://schokokeks.org/
 // Submitted by Hanno Böck <hanno@schokokeks.org>
 schokokeks.net
@@ -13654,6 +14023,10 @@
 // Submitted by Dan Kozak <dan@smoove.io>
 vp4.me
 
+// Snowflake Inc : https://www.snowflake.com/
+// Submitted by Faith Olapade <faith.olapade@snowflake.com>
+streamlitapp.com
+
 // Snowplow Analytics : https://snowplowanalytics.com/
 // Submitted by Ian Streeter <ian@snowplowanalytics.com>
 try-snowplow.com
@@ -13667,6 +14040,8 @@
 stackhero-network.com
 
 // Staclar : https://staclar.com
+// Submitted by Q Misell <q@staclar.com>
+musician.io
 // Submitted by Matthias Merkel <matthias.merkel@staclar.com>
 novecore.site
 
@@ -13765,26 +14140,36 @@
 
 // Synology, Inc. : https://www.synology.com/
 // Submitted by Rony Weng <ronyweng@synology.com>
-diskstation.me
 dscloud.biz
-dscloud.me
-dscloud.mobi
+direct.quickconnect.cn
 dsmynas.com
-dsmynas.net
-dsmynas.org
 familyds.com
-familyds.net
-familyds.org
+diskstation.me
+dscloud.me
 i234.me
 myds.me
 synology.me
+dscloud.mobi
+dsmynas.net
+familyds.net
+dsmynas.org
+familyds.org
 vpnplus.to
 direct.quickconnect.to
 
+// Tabit Technologies Ltd. : https://tabit.cloud/
+// Submitted by Oren Agiv <oren@tabit.cloud>
+tabitorder.co.il
+
 // TAIFUN Software AG : http://taifun-software.de
 // Submitted by Bjoern Henke <dev-server@taifun-software.de>
 taifun-dns.de
 
+// Tailscale Inc. : https://www.tailscale.com
+// Submitted by David Anderson <danderson@tailscale.com>
+beta.tailscale.net
+ts.net
+
 // TASK geographical domains (www.task.gda.pl/uslugi/dns)
 gda.pl
 gdansk.pl
@@ -13792,9 +14177,14 @@
 med.pl
 sopot.pl
 
+// team.blue https://team.blue
+// Submitted by Cedric Dubois <cedric.dubois@team.blue>
+site.tb-hosting.com
+
 // Teckids e.V. : https://www.teckids.org
 // Submitted by Dominik George <dominik.george@teckids.org>
-edugit.org
+edugit.io
+s3.teckids.org
 
 // Telebit : https://telebit.cloud
 // Submitted by AJ ONeal <aj@telebit.cloud>
@@ -13802,10 +14192,6 @@
 telebit.io
 *.telebit.xyz
 
-// The Gwiddle Foundation : https://gwiddlefoundation.org.uk
-// Submitted by Joshua Bayfield <joshua.bayfield@gwiddlefoundation.org.uk>
-gwiddle.co.uk
-
 // Thingdust AG : https://thingdust.com/
 // Submitted by Adrian Imboden <adi@thingdust.com>
 *.firenet.ch
@@ -13820,6 +14206,10 @@
 reservd.disrec.thingdust.io
 reservd.testing.thingdust.io
 
+// ticket i/O GmbH : https://ticket.io
+// Submitted by Christian Franke <it@ticket.io>
+tickets.io
+
 // Tlon.io : https://tlon.io
 // Submitted by Mark Staarink <mark@tlon.io>
 arvo.network
@@ -13868,6 +14258,10 @@
 *.transurl.eu
 *.transurl.nl
 
+// TransIP: https://www.transip.nl
+// Submitted by Cedric Dubois <cedric.dubois@team.blue>
+site.transip.me
+
 // TuxFamily : http://tuxfamily.org
 // Submitted by TuxFamily administrators <adm@staff.tuxfamily.org>
 tuxfamily.org
@@ -13888,6 +14282,14 @@
 synology-diskstation.de
 synology-ds.de
 
+// Typedream : https://typedream.com
+// Submitted by Putri Karunia <putri@typedream.com>
+typedream.app
+
+// Typeform : https://www.typeform.com
+// Submitted by Sergi Ferriz <sergi.ferriz@typeform.com>
+pro.typeform.com
+
 // Uberspace : https://uberspace.de
 // Submitted by Moritz Werner <mwerner@jonaspasche.com>
 uber.space
@@ -13900,11 +14302,24 @@
 ltd.hk
 inc.hk
 
+// UNIVERSAL DOMAIN REGISTRY : https://www.udr.org.yt/
+// see also: whois -h whois.udr.org.yt help
+// Submitted by Atanunu Igbunuroghene <publicsuffixlist@udr.org.yt>
+name.pm
+sch.tf
+biz.wf
+sch.wf
+org.yt
+
 // United Gameserver GmbH : https://united-gameserver.de
 // Submitted by Stefan Schwarz <sysadm@united-gameserver.de>
 virtualuser.de
 virtual-user.de
 
+// Upli : https://upli.io
+// Submitted by Lenny Bakkalian <lenny.bakkalian@gmail.com>
+upli.io
+
 // urown.net : https://urown.net
 // Submitted by Hostmaster <hostmaster@urown.net>
 urown.cloud
@@ -13982,19 +14397,14 @@
 // Submitted by Serhii Rostilo <sergey@rostilo.kiev.ua>
 v.ua
 
+// Vultr Objects : https://www.vultr.com/products/object-storage/
+// Submitted by Niels Maumenee <storage@vultr.com>
+*.vultrobjects.com
+
 // Waffle Computer Inc., Ltd. : https://docs.waffleinfo.com
 // Submitted by Masayuki Note <masa@blade.wafflecell.com>
 wafflecell.com
 
-// WapBlog.ID : https://www.wapblog.id
-// Submitted by Fajar Sodik <official@wapblog.id>
-idnblogger.com
-indowapblog.com
-bloger.id
-wblog.id
-wbq.me
-fastblog.net
-
 // WebHare bv: https://www.webhare.com/
 // Submitted by Arnold Hendriks <info@webhare.com>
 *.webhare.dev
@@ -14031,6 +14441,10 @@
 panel.gg
 daemon.panel.gg
 
+// Wizard Zines : https://wizardzines.com
+// Submitted by Julia Evans <julia@wizardzines.com>
+messwithdns.com
+
 // WoltLab GmbH : https://www.woltlab.com
 // Submitted by Tim Düsterhus <security@woltlab.cloud>
 woltlab-demo.com
@@ -14040,6 +14454,12 @@
 community-pro.net
 meinforum.net
 
+// Woods Valldata : https://www.woodsvalldata.co.uk/
+// Submitted by Chris Whittle <chris.whittle@woodsvalldata.co.uk>
+affinitylottery.org.uk
+raffleentry.org.uk
+weeklylottery.org.uk
+
 // WP Engine : https://wpengine.com/
 // Submitted by Michael Smith <michael.smith@wpengine.com>
 // Submitted by Brandon DuRette <brandon.durette@wpengine.com>
@@ -14047,7 +14467,7 @@
 js.wpenginepowered.com
 
 // Wix.com, Inc. : https://www.wix.com
-// Submitted by Shahar Talmi <shahart@wix.com>
+// Submitted by Shahar Talmi <shahar@wix.com>
 wixsite.com
 editorx.io

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/lib/IO/Socket/SSL/Utils.pm -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/lib/IO/Socket/SSL/Utils.pm Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/acceptSSL-timeout.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/acceptSSL-timeout.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/alpn.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/alpn.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/auto_verify_hostname.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/auto_verify_hostname.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/cert_formats.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/cert_formats.t Changed

@@ -15,7 +15,7 @@
 my ($fh,$pemfile) = tempfile();
 my $master = $$;
 END { unlink($pemfile) if $$ == $master };
-for ('certs/server-cert.pem','certs/server-key.pem') {
+for ('t/certs/server-cert.pem','t/certs/server-key.pem') {
     open( my $pf,'<',$_ ) or die "open $_: $!";
     print $fh do { local $/; <$pf> };
 }
@@ -23,26 +23,26 @@
 
 my @tests = (
     'PEM' => {
-	SSL_cert_file => 'certs/server-cert.pem',
-	SSL_key_file => 'certs/server-key.pem',
+	SSL_cert_file => 't/certs/server-cert.pem',
+	SSL_key_file => 't/certs/server-key.pem',
     },
     'PEM_one_file' => {
 	SSL_cert_file => $pemfile,
     },
     'PEM_keyenc' => {
-	SSL_cert_file => 'certs/server-cert.pem',
-	SSL_key_file => 'certs/server-key.enc',
+	SSL_cert_file => 't/certs/server-cert.pem',
+	SSL_key_file => 't/certs/server-key.enc',
 	SSL_passwd_cb => sub { "bluebell" },
     },
     'DER' => {
-	SSL_cert_file => 'certs/server-cert.der',
-	SSL_key_file => 'certs/server-key.der',
+	SSL_cert_file => 't/certs/server-cert.der',
+	SSL_key_file => 't/certs/server-key.der',
     },
     'PKCS12' => {
-	SSL_cert_file => 'certs/server.p12',
+	SSL_cert_file => 't/certs/server.p12',
     },
     'PKCS12_enc' => {
-	SSL_cert_file => 'certs/server_enc.p12',
+	SSL_cert_file => 't/certs/server_enc.p12',
 	SSL_passwd_cb => sub { "bluebell" },
     },
 );

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/cert_no_file.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/cert_no_file.t Changed

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/client-cert.pem Added

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/client-key.enc Added

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/client-key.pem Added

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/create-certs.pl Added

@@ -0,0 +1,133 @@
+use strict;
+use warnings;
+use IO::Socket::SSL::Utils;
+use Net::SSLeay;
+
+my $dir = "./";
+my $now = time();
+my $later = $now + 10*365*86400;
+
+Net::SSLeay::SSLeay_add_ssl_algorithms();
+my $sha256 = Net::SSLeay::EVP_get_digestbyname('sha256') or die;
+my $printfp = sub {
+    my ($w,$cert) = @_;
+    print $w.' sha256$'.unpack('H*',Net::SSLeay::X509_digest($cert, $sha256))."\n"
+};
+
+my %time_valid = (not_before => $now, not_after => $later);
+
+my @ca = CERT_create(
+    CA => 1,
+    subject => { CN => 'IO::Socket::SSL Demo CA' },
+    %time_valid,
+);
+save('test-ca.pem',PEM_cert2string($ca0));
+
+my @server = CERT_create(
+    CA => 0,
+    subject => { CN => 'server.local' },
+    subjectAltNames =>   DNS => 'server.local' ,  IP => '127.0.0.1'  ,
+    purpose => 'server',
+    issuer => \@ca,
+    %time_valid,
+);
+save('server-cert.pem',PEM_cert2string($server0));
+save('server-key.pem',PEM_key2string($server1));
+$printfp->(server => $server0);
+
+@server = CERT_create(
+    CA => 0,
+    subject => { CN => 'server2.local' },
+    subjectAltNames =>   DNS => 'server2.local' ,  IP => '127.0.0.1'  ,
+    purpose => 'server',
+    issuer => \@ca,
+    %time_valid,
+);
+save('server2-cert.pem',PEM_cert2string($server0));
+save('server2-key.pem',PEM_key2string($server1));
+$printfp->(server2 => $server0);
+
+@server = CERT_create(
+    CA => 0,
+    subject => { CN => 'server-ecc.local' },
+    subjectAltNames =>   DNS => 'server-ecc.local' ,  IP => '127.0.0.1'  ,
+    purpose => 'server',
+    issuer => \@ca,
+    key => KEY_create_ec(),
+    %time_valid,
+);
+save('server-ecc-cert.pem',PEM_cert2string($server0));
+save('server-ecc-key.pem',PEM_key2string($server1));
+$printfp->('server-ecc' => $server0);
+
+
+my @client = CERT_create(
+    CA => 0,
+    subject => { CN => 'client.local' },
+    purpose => 'client',
+    issuer => \@ca,
+    %time_valid,
+);
+save('client-cert.pem',PEM_cert2string($client0));
+save('client-key.pem',PEM_key2string($client1));
+$printfp->(client => $client0);
+
+my @swc = CERT_create(
+    CA => 0,
+    subject => { CN => 'server.local' },
+    purpose => 'server',
+    issuer => \@ca,
+    subjectAltNames =>  
+	 DNS => '*.server.local' ,
+	 IP => '127.0.0.1' ,
+	 DNS => 'www*.other.local' ,
+	 DNS => 'smtp.mydomain.local' ,
+	 DNS => 'xn--lwe-sna.idntest.local' 
+    ,
+    %time_valid,
+);
+save('server-wildcard.pem',PEM_cert2string($swc0),PEM_key2string($swc1));
+
+
+my @subca = CERT_create(
+    CA => 1,
+    issuer => \@ca,
+    subject => { CN => 'IO::Socket::SSL Demo Sub CA' },
+    %time_valid,
+);
+save('test-subca.pem',PEM_cert2string($subca0));
+@server = CERT_create(
+    CA => 0,
+    subject => { CN => 'server.local' },
+    subjectAltNames =>   DNS => 'server.local' ,  IP => '127.0.0.1'  ,
+    purpose => 'server',
+    issuer => \@subca,
+    %time_valid,
+);
+save('sub-server.pem',PEM_cert2string($server0).PEM_key2string($server1));
+
+
+
+my @cap = CERT_create(
+    CA => 1,
+    subject => { CN => 'IO::Socket::SSL::Intercept' },
+    %time_valid,
+);
+save('proxyca.pem',PEM_cert2string($cap0).PEM_key2string($cap1));
+
+sub save {
+    my $file = shift;
+    open(my $fd,'>',$dir.$file) or die $!;
+    print $fd @_;
+}
+
+system(<<CMD);
+cd $dir
+set -x
+openssl x509 -in server-cert.pem -out server-cert.der -outform der
+openssl rsa -in server-key.pem -out server-key.der -outform der
+openssl rsa -in server-key.pem -out server-key.enc -passout pass:bluebell
+openssl rsa -in client-key.pem -out client-key.enc -passout pass:opossum
+openssl pkcs12 -export -in server-cert.pem -inkey server-key.pem -out server.p12 -descert -passout pass:
+openssl pkcs12 -export -in server-cert.pem -inkey server-key.pem -out server_enc.p12 -descert -passout pass:bluebell
+CMD

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/proxyca.pem Added

@@ -0,0 +1,47 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN PRIVATE KEY-----
+MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQC9crhqFxT9RBxc
+G3hohX3HDdyvdvHPBUNkslXth12y8MXgufjMHsDWvCK6QGSd29HjkCaFtqXJhZJj
+NaLk4kfRpXD/fu2fvWw8JMtlbmzi7LGdBwR9noPyoYYSYC3aTRa0R/75EDFq7ram
+Z1KX7saoiCwcqKsWx+nSsUEjTWH65Eb7Vb8K+L/UIW1e6uOhXPoIfS1H5jzGBjnJ
+Iv3xT+FHbRuUj22RnW4H2CaHzmwscC/37QhGiwnp2eIbFz64oCvGWRBQ+evneQb5
+w4yctlwGZ41L8qO8GUAdlsqki9P1pI77DCoBHH4qljlGr5Sa95cZ69sP4xeciBDt
+OGVunluBAgMBAAECggEASQ9G41MHeyybK0JEyzo/6VYFN33NfyLufJTx4mqDzhBg
+n2vY8Q8jGyzuz5kptF8jsHjVAlgP04m5jJ0Qtug0/jqpOz798M6iQQeHkRRm1ZSm
+YoJkTvWkuRtlkwyYYkm8acYiJHcEN9LbiYzrI0CoSDJLoLnDUUPDfsdw8WZUVOau
+Qz94Z1+RuQ82yicKxdmqCboPvpsrmqnFecYlPHdjHIk1xdR0omoEp5rp7cFQSVAg
+mX85VMeJJAG0MqXvmlHOrB8axi+C56ToD7nXPpEiQpQKRbxSYOCZc8o3jXSrkd4/
+UDVSlevOXHFeeQc1RXVweFk36hajxszKXmWCEkPa6QKBgQDeScGQnZWIRa+A3Z2Z
+T5YuluyXFw5mF86Pkmzr8huj3aUOHKsQBVc7B8CZdZTVOQkvoCmS2gV1dwberu2U
+Zs3KE+SCHVXIP89vKr4fVjDDEq7DaBg8QNuXDV7vjuiH9aaqF3edmNkS3RHq4GA5
+LQblR7cEOzcBtdPw6Nwn8dkizwKBgQDaLfcqU56kjubF+xg0fhi4FUnpdu0rCVLp
+FCzaUmCCAepjAdi2Xs8H74usqrbigbXd07lNEetbU2AWe1B6H5FX7vfWnGRqunvq
+DLUs2dqxXaXRjMISwBuqCCN7odx+uHFFg9B72Ar6QsM33mcJIoM4o9v8LFfVgbtt
+Jbn4FftwrwKBgF4ADqzbFtrzrQ3vqa+lajr1c8NI6rvdoWoxX4I/ddTL6/qVwPkb
+aRH7a0T55iBs6CeNsUb6j4hm9y7ABpPVDX1BAEbNpPLzmQLHrnKN/jzf76uOn4EL
+ZFDyRI1Ff6vPA9W16s1oT5OcjPEoRUioc9wNgaV2bQJ6I9AiiMcTjOEdAoGAUMz7
+H2rOcuUVZDbktPQKFYqUz+iiVvDiCr3VCpm9cghhlH8nkgq0o5y8Xprulh4xi1CQ
+7JD5V94d1NWgbUnpmuY+VPWgXsJnh7tjEZQw4MTs1xlI+oa4+BSBh5TfQvLtyC/T
+8zmEf0Bgaf1srT5h2IUewFpvwPuFvRterxj9ALMCgYAPkbzABqm9EQdynBvoiJYB
+YeOPf0LzGnwl/e1lRMV0mYJlcDZC3jzwe9iTEtlT4CBtyousZyMsT0CFb0cs764p
+5a5v/nHcrTPvh98t1yEIjAXqKigXZtfvttzQGPU60zhzPQqidYfKrhZqHloXOhtI
+m5grczgEd6RbYPixV7HThw==
+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-cert.der Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-cert.pem Added

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-ecc-cert.pem Added

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-ecc-key.pem Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-key.der Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-key.enc Added

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-key.pem Added

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-wildcard.pem Added

@@ -0,0 +1,50 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server.p12 Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server2-cert.pem Added

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDYzCCAkugAwIBAgIFANn2EaswDQYJKoZIhvcNAQELBQAwIjEgMB4GA1UEAwwX
+SU86OlNvY2tldDo6U1NMIERlbW8gQ0EwHhcNMjIxMjExMTk1MzQxWhcNMzIxMjA4
+MTk1MzQxWjAYMRYwFAYDVQQDDA1zZXJ2ZXIyLmxvY2FsMIIBIjANBgkqhkiG9w0B
+AQEFAAOCAQ8AMIIBCgKCAQEA1WJtob8UnSi5DcfD63MxMGb4T45yFJvVq0GkrQD8
+noRPEOA2yQP4wxFhqa7eSdApGMHxff1PqhflL7Ovdv8cNcD96B8/dd0DpEbLAyO4
+GOlCeWIqnAXwQQLTwIoS1iela9kknvvJ3IbXL5Xc6d05jrjkjfEYdrNOz0yleiyN
+/I++r5BRkl4m2yw67w3/W05mhKyksqUeF+0kFAGFYYC9MEpLCey+syd3o904W7c+
+G8DW5Xq31z5uyq5gMceuYYEGEa3i9qMGYxnqfIGoF2yyIr4uOXmaSABZPRx5eshX
+G/5ZLaq5+WEtNX3c/9VUIB82NVH4jC/KoZafBDCX4uH7UQIDAQABo4GpMIGmMB0G
+A1UdDgQWBBSLwPfz2qNRAqULbZicYg2odGJnMzAfBgNVHSMEGDAWgBRJ09i8KhLW
+b8FZBG7Zb/+0phLfXDAeBgNVHREEFzAVgg1zZXJ2ZXIyLmxvY2FshwR/AAABMAwG
+A1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMBEGCWCGSAGG+EIBAQQEAwIGQDAT
+BgNVHSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAQEAdkFtd3g53oN3
+l8lVDQfyOaPmWfakMoWkF/hDENOtCZUhxFYQlBK02erj3/IKbfOLRBa3rHq6CEHp
+KnBEG3KorZL/AJniDnhUpkNweQ7nh+cvOBZsRO74sqLBVkjYdsrdIjdIQPS5+SvB
+PWfL42qVFpi1hWZ8B5qgizGPYvHDeZW5HCvuYELC9nxCjTPjbkcftfS1JrdIrarO
+OH7eFnMso8cuC+Ywo/n19B0fhsOWV4q3S0qx6Ud5vtZMAW4NWlp3pg0lBZxIVAjT
+t70UzK0kL7EPGe95+y+DMoKyi2JdyRkD5vyFl7rB4Qo2TCW8xyNggP/GlKoWhBmG
+EFGeaj3Gig==
+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server2-key.pem Added

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server_enc.p12 Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/sub-server.pem Added

@@ -0,0 +1,49 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN PRIVATE KEY-----
+MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQDH+oCUTET2+fEZ
+d6+ytV4qfJp5Gl2ZE/e2dPUfn/YMOcRag0HV5Rs+kX906DGs8p8DPe6Zl1cgCex9
+C5VEoJbuYAQH6HhQRKhEvTrNEkhrHUgT1mQ6tzkDEx/1j+dPrmXOdaUfVS2XgnLX
+RVc6Aenh2b5/gqowxk5uNd4AsHuDeg6Y7GVgOxAjg7sCYOIxy8pbvzyxxokrhr9v
+zbgcLv+B4wUmWgJlyVjISHbegfyJ3lsmTRwCiBG4xrGMPQpQTqyzZu9vILPq0eqs
+T/V3cOPzDW1td1Q7B22q9Xuq3VURfDe5vKoZWmM3gIolwWicGt0zl7U8sxpROJw1
+df5DmKyPAgMBAAECggEAAa7y1SQF8pim2SWI0t5uQLmUQDh0R4XVAfH2AhmkwOjG
+TmoFoLe59nxIEECNw5afFIGt0i/8uYp0kn9DyF0Qb3da/mwMUzp4uoMKjVt4FoCQ
+AkPU+kECgFn8/79ql74qld0b71JcMTVyxcML/G1WslxsA/doHf3PisDHySMQRmG5
+tIlCW36hNBgcxp33nRj5RPpuYJVJ5q9rGJQxBJpEuNJcjVqqTolwL3/nYaDkl5vJ
+j2rHgrr+9EIPdULv7pRxFGaCHE6NtbK0sq9GjncWr0zreTLc5g5rM1/oo7A3zLz4
+eJQ993BhzABwlvy9UCJ3Fd+oJe9BNMZjLsurf7+SoQKBgQDc8TcDyMbck9RXgVKT
+WPF1hEebw88wy44g6wg+fgCX73TM4BDbThQCbHwklagrxZxIxwoHTeBrGwlipYh5
+Sd7TyHE9L6YrBvnVpYQd1N4ko5sCyx7Rwo95sLbpW7Scs/UsfvdPC3jyIa9QGvG5
+QWrkohTa8TNeu8UXWpmcLazvrwKBgQDntbr/wIxS3Tjos9F5vYTB6Y5T9M66cjcy
+YOhA/uJXisGdayj5pl62a/Sp0xyTjjDILd/fwkcRHvzdfCb88przH+yp4Ctzfas5
+cNyavBHtzrvnAQWMvOoHWhnyyJd2IlJnwrKgHIwDVNvF0Gaho6TWY5CNfy2zrnHU
+f++hZrFpIQKBgAmVoThVzmKlOxHst0NTGW5qpZyZOvS379t3tqzXVHlC1wNIORL6
+aR3NzPjdUSVM9kGl+MZmV3TuAFM6MRhp3vO6/0aTOZcmP1JIUtnkcRqPylqtqxGY
+ahbyVoz7AHPHzrv2ag4QxldipLNJ5/CMaPGwIk15JyxV4u/na0B+LsFbAoGAMeeH
+Hfw3fMVes2e/LwwtYqJN4DEysR9WWghbHVyIHTiqWKAy1AoMDhgUOttYJUOTqBmR
+RR0Pt1VIOt+5efM6gjCXBUNduGMRlK6FJOJqriA/ghJLQrORaAH04sBnNq9Ptj9N
+v4RGd5U4PFOVNy0KnI4XHRKOIkvpAk6Hquh2P2ECgYAvjhDNoxMHCzCEQAlQPZG1
+QhleZkAUBBgGrm/UukRV3GsNUd8EAmiXEcFzS4jvMROsbeLufS0bSQxe+TXwGO/2
+tTa4xlOZ80wYt2lyA9Vw4XyXOijbKBemNePhq6DH5NvlVS1j+7+9CQTC6Awt37qn
+YNPDnMjecnI86C944N29ag==
+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/test-ca.pem Added

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----
+MIIDIjCCAgqgAwIBAgIEPGupAjANBgkqhkiG9w0BAQsFADAiMSAwHgYDVQQDDBdJ
+Tzo6U29ja2V0OjpTU0wgRGVtbyBDQTAeFw0yMjEyMTExOTUzNDFaFw0zMjEyMDgx
+OTUzNDFaMCIxIDAeBgNVBAMMF0lPOjpTb2NrZXQ6OlNTTCBEZW1vIENBMIIBIjAN
+BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunYRHBif+Nltt/y4zxgrmg0/XTMh
+CVj1+ITPtpIImmuNlN/YKFzjdVLCjsfsiy7h1a8IfqopzFp/JciijHXEW9NyqWJY
+hwGATku0W72e2T4R0H0LikJ33R1oTP5YfKOHz82ZTJJF3xI57py9Q6AJjM1lCMt6
+1EAUqPteBLy0xIOabQDp+RpzKv1Uo5aMHiLACl6J52w8IBDIYhz5YXDNULdt6AYK
+9Hqyw+m6FiULr+SrKfjgHFHunM9r79aS27iuqwLrAiHvuCfSp0o+qmslz6YIfpF6
+/BziErz1dtnDjqinUlGYCDUPRb2nHI5/h6uFGQuF+w3hud3Ip/nZLMLPtQIDAQAB
+o2AwXjAdBgNVHQ4EFgQUSdPYvCoS1m/BWQRu2W//tKYS31wwCQYDVR0jBAIwADAP
+BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIChDARBglghkgBhvhCAQEEBAMC
+AAcwDQYJKoZIhvcNAQELBQADggEBAI1f2QhRUn4pnrESAYowXBPFe0SKpN8d2Pqz
+WbagBA2/QaZmkW7AhFoSb0Ni2Jhe9RflbBfF6WQIS6uVuSWT414DGMUQjhGjhLXm
+5f4YxtIpeKyFqAkcpHiB7XEO+mfT1iV5jw1e4yq7c8fOFCEI4cAQzdDpr35vjEPw
+pdSXNHCqIbmbDRZigwGK3m0WNATu2K+54QC+rPKzzb6CDb24lRcWKlmzbaeowKEn
+zP5GqlNz9PTF6OTxBFxe6hxklE6uudViEqBkD3TvFeXDt4ny1xFUbABxtU3qbwHA
+r//e1FKMu3RDxJyAiTVPKwsN8dL6KgH4AFL96HV/pkCrIds7i3c=
+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/test-subca.pem Added

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/compatibility.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/compatibility.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/connectSSL-timeout.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/connectSSL-timeout.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/core.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/core.t Changed

@@ -46,7 +46,7 @@
     Timeout => 30,
     ReuseAddr => 1,
     SSL_verify_mode => 0x00,
-    SSL_ca_file => "certs/test-ca.pem",
+    SSL_ca_file => "t/certs/test-ca.pem",
     SSL_version => $tls_version,
     SSL_error_trap => sub {
 	my $self = shift;
@@ -54,8 +54,8 @@
 	$error_trapped = 1;
 	$self->close;
     },
-    SSL_cert_file => "certs/server-cert.pem",
-    SSL_key_file => "certs/server-key.enc",
+    SSL_cert_file => "t/certs/server-cert.pem",
+    SSL_key_file => "t/certs/server-key.enc",
     SSL_passwd_cb => sub { return "bluebell" },
 );
 
@@ -82,10 +82,10 @@
 	LocalAddr => $localip,
 	Domain => AF_INET,
 	SSL_verify_mode => 0x01,
-	SSL_ca_file => "certs/test-ca.pem",
+	SSL_ca_file => "t/certs/test-ca.pem",
 	SSL_use_cert => 1,
-	SSL_cert_file => "certs/client-cert.pem",
-	SSL_key_file => "certs/client-key.enc",
+	SSL_cert_file => "t/certs/client-cert.pem",
+	SSL_key_file => "t/certs/client-key.enc",
 	SSL_passwd_cb => sub { return "opossum" },
 	SSL_verify_callback => \&verify_sub,
     );
@@ -130,7 +130,6 @@
 		    4.0,
 		    ord("y"),
 		    "Test\nBeaver\nBeaver\n");
-    shutdown($client, 1);
 
     my $buffer="\0\0aaaaaaaaaaaaaaaaaaaa";
     $client->sysread($buffer, 7, 2);
@@ -185,10 +184,10 @@
 	    LocalAddr => $localip,
 	    Domain => AF_INET,
 	    SSL_verify_mode => 0x01,
-	    SSL_ca_file => "certs/test-ca.pem",
+	    SSL_ca_file => "t/certs/test-ca.pem",
 	    SSL_use_cert => 1,
-	    SSL_cert_file => "certs/client-cert.pem",
-	    SSL_key_file => "certs/client-key.enc",
+	    SSL_cert_file => "t/certs/client-cert.pem",
+	    SSL_key_file => "t/certs/client-key.enc",
 	    SSL_passwd_cb => sub { return "opossum" },
 	    Blocking => 0,
 	);
@@ -247,7 +246,7 @@
 
 is( getc($client), "\$", "Server Getc Check");
 
-@array = <$client>;
+@array = map { scalar <$client> } (0..5);
 is( scalar @array, 6, "Server Getlines Check 1");
 
 is( $array0, "1.04\n", "Server Getlines Check 2");

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/dhe.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/dhe.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/ecdhe.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/ecdhe.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/external/fingerprint.pl -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/external/fingerprint.pl Changed

@@ -1,5 +1,5 @@
 # to update fingerprints in this file:
-# perl -e 'do qt/external/fingerprint.pl; update_fingerprints()'
+# perl -e 'do q./t/external/fingerprint.pl; update_fingerprints()'
 
 use strict;
 use warnings;
@@ -18,17 +18,17 @@
   },
   {
     _ => 'no OCSP stapling',
-    fingerprint => 'sha1$pub$f8c51d37c070c423ccc5f6065e080b94ce03494c',
+    fingerprint => 'sha1$pub$c8ba0806b887fc15e9d98e73107a17150f847bbf',
     host => 'www.bild.de',
     ocsp => {
               staple => 0
             },
     port => 443,
-    subject_hash_ca => 'e2799e36'
+    subject_hash_ca => '3513523f'
   },
   {
     _ => 'this is revoked',
-    fingerprint => 'sha1$pub$75f8bfe5feac656c894c06011422b6455854b4e5',
+    fingerprint => 'sha1$pub$f0f0c49b8a04a2dd2110e10f7806c97d87d0b26f',
     host => 'revoked.grc.com',
     ocsp => {
               revoked => 1
@@ -36,40 +36,40 @@
     port => 443
   },
   {
-    fingerprint => 'sha1$pub$56f745d484d13c95ad58142ef4d1cc2f11c073f6',
+    fingerprint => 'sha1$pub$7397f9dea15c007ad1eabe7a0c895ccac60389b1',
     host => 'www.yahoo.com',
     port => 443,
     subject_hash_ca => '244b5494'
   },
   {
-    fingerprint => 'sha1$pub$52509cfecdc8264c21da6279360e89c1be1bc30a',
+    fingerprint => 'sha1$pub$c40d9bc2496fa2db198b27b6c1f94d1c703e7039',
     host => 'www.comdirect.de',
     port => 443,
-    subject_hash_ca => '02265526'
+    subject_hash_ca => '062cdee6'
   },
   {
-    fingerprint => 'sha1$pub$c2ee1cc0963c55286bcd549f1d782c5557602f4c',
+    fingerprint => 'sha1$pub$26907a3f3088cf57264f7a0f083767e400ea871e',
     host => 'meine.deutsche-bank.de',
     port => 443,
-    subject_hash_ca => 'c01cdfa2'
+    subject_hash_ca => '607986c7'
   },
   {
-    fingerprint => 'sha1$pub$5414c379b16298b2352812d7f5c7f4b576da9efa',
+    fingerprint => 'sha1$pub$232e02961a493a2e528460d0d3c0720a8f533428',
     host => 'www.twitter.com',
     port => 443,
-    subject_hash_ca => '244b5494'
+    subject_hash_ca => '3513523f'
   },
   {
-    fingerprint => 'sha1$pub$7b89d1ee6a48e3abc504ee1642dbc7d0fc74965b',
+    fingerprint => 'sha1$pub$12b35a6d540bcba5f9ff055fdcc5af0dac67fc73',
     host => 'www.facebook.com',
     port => 443,
     subject_hash_ca => '244b5494'
   },
   {
-    fingerprint => 'sha1$pub$9c070a464b2eb1ee315120bcd0a0ba82e711be9c',
+    fingerprint => 'sha1$pub$6ad05c9dd77463152389f755cb6a81c41c33c987',
     host => 'www.live.com',
     port => 443,
-    subject_hash_ca => '653b494a'
+    subject_hash_ca => '3513523f'
   }
 
 ;

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/io-socket-inet6.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/io-socket-inet6.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/io-socket-ip.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/io-socket-ip.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/memleak_bad_handshake.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/memleak_bad_handshake.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/mitm.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/mitm.t Changed

@@ -16,8 +16,8 @@
 my $server = IO::Socket::SSL->new(
     LocalAddr => '127.0.0.1',
     LocalPort => 0,
-    SSL_cert_file => 'certs/server-cert.pem',
-    SSL_key_file => 'certs/server-key.pem',
+    SSL_cert_file => 't/certs/server-cert.pem',
+    SSL_key_file => 't/certs/server-key.pem',
     Listen => 10,
 );
 ok($server,"server ssl socket");
@@ -45,7 +45,7 @@
     PeerAddr => $saddr,
     Domain => AF_INET,
     SSL_verify_mode => 1,
-    SSL_ca_file => 'certs/test-ca.pem',
+    SSL_ca_file => 't/certs/test-ca.pem',
 );
 ssl_ok($cl,"ssl connected to server");
 ok( $cl->peer_certificate('subject') =~ m{server\.local}, "subject w/o mitm");
@@ -57,7 +57,7 @@
     PeerAddr => $paddr,
     Domain => AF_INET,
     SSL_verify_mode => 1,
-    SSL_ca_file => 'certs/proxyca.pem',
+    SSL_ca_file => 't/certs/proxyca.pem',
 );
 ssl_ok($cl,"ssl connected to proxy");
 ok( $cl->peer_certificate('subject') =~ m{server\.local}, "subject w/ mitm");
@@ -74,8 +74,8 @@
 
 sub proxy {
     my $mitm = IO::Socket::SSL::Intercept->new(
-	proxy_cert_file => 'certs/proxyca.pem',
-	proxy_key_file => 'certs/proxyca.pem',
+	proxy_cert_file => 't/certs/proxyca.pem',
+	proxy_key_file => 't/certs/proxyca.pem',
     );
     while (1) {
 	my $toc = $proxy->accept or next;
@@ -83,7 +83,7 @@
 	    PeerAddr => $saddr,
 	    Domain => AF_INET,
 	    SSL_verify_mode => 1,
-	    SSL_ca_file => 'certs/test-ca.pem',
+	    SSL_ca_file => 't/certs/test-ca.pem',
 	) or die "failed connect to server: $!, $SSL_ERROR";
 	my ($cert,$key) = $mitm->clone_cert($tos->peer_certificate);
 	$toc = IO::Socket::SSL->start_SSL( $toc,

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/multiple-cert-rsa-ecc.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/multiple-cert-rsa-ecc.t Changed

@@ -23,14 +23,14 @@
 
 my %certs = (
     SSL_cert_file => {
-	'' => 'certs/server-cert.pem',
-	'%ecc' => "certs/server-ecc-cert.pem",
-	'server2.local' => 'certs/server2-cert.pem',
+	'' => 't/certs/server-cert.pem',
+	'%ecc' => "t/certs/server-ecc-cert.pem",
+	'server2.local' => 't/certs/server2-cert.pem',
     },
     SSL_key_file => {
-	'' => 'certs/server-key.pem',
-	'%ecc' => 'certs/server-ecc-key.pem',
-	'server2.local' => 'certs/server2-key.pem',
+	'' => 't/certs/server-key.pem',
+	'%ecc' => 't/certs/server-ecc-key.pem',
+	'server2.local' => 't/certs/server2-key.pem',
     }
 );
 
@@ -49,7 +49,7 @@
     Listen => 2,
     ReuseAddr => 1,
     SSL_server => 1,
-    SSL_ca_file => "certs/test-ca.pem",
+    SSL_ca_file => "t/certs/test-ca.pem",
     SSL_honor_cipher_order => 0,
     SSL_cipher_list => 'ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA',
     %certs,
@@ -86,7 +86,7 @@
 	    Domain => AF_INET,
 	    SSL_verify_mode => 0,
 	    SSL_hostname => $host,
-	    SSL_ca_file => 'certs/test-ca.pem',
+	    SSL_ca_file => 't/certs/test-ca.pem',
 	    SSL_cipher_list => $ciphers,
 	    # don't use TLS 1.3 since the ciphers there don't specifify the
 	    # authentication mechanism

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/nonblock.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/nonblock.t Changed

@@ -121,7 +121,7 @@
 	if ( ! IO::Socket::SSL->start_SSL( $to_server,
 	    SSL_startHandshake => 0,
 	    SSL_verify_mode => 0,
-	    SSL_key_file => "certs/server-key.enc",
+	    SSL_key_file => "t/certs/server-key.enc",
 	    SSL_passwd_cb => sub { return "bluebell" },
 	)) {
 	    diag( 'start_SSL return undef' );
@@ -178,11 +178,8 @@
 	    };
 	}
 
-	my $test_might_fail;
-	if ( $@ ) {
-	    # the next test might fail because setsockopt(... SO_SNDBUF...) failed
-	    $test_might_fail = 1;
-	}
+	# This test is too much dependant on OS
+	my $test_might_fail = 1;
 
 	my $can;
 	WRITE:
@@ -240,7 +237,7 @@
 	ok( "syswrite" );
 
 	if ( ! $attempts && $test_might_fail ) {
-	    ok( " write attempts failed, but OK nevertheless because setsockopt failed" );
+	    ok( "write attempts failed, but OK nevertheless because we know it can fail" );
 	} else {
 	    print "not " if !$attempts;
 	    ok( "multiple write attempts" );
@@ -292,10 +289,10 @@
 	    SSL_startHandshake => 0,
 	    SSL_server => 1,
 	    SSL_verify_mode => 0x00,
-	    SSL_ca_file => "certs/test-ca.pem",
+	    SSL_ca_file => "t/certs/test-ca.pem",
 	    SSL_use_cert => 1,
-	    SSL_cert_file => "certs/client-cert.pem",
-	    SSL_key_file => "certs/client-key.enc",
+	    SSL_cert_file => "t/certs/client-cert.pem",
+	    SSL_key_file => "t/certs/client-key.enc",
 	    SSL_passwd_cb => sub { return "opossum" },
 	)) {
 	    diag( 'start_SSL return undef' );

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/npn.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/npn.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/plain_upgrade_downgrade.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/plain_upgrade_downgrade.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/protocol_version.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/protocol_version.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/readline.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/readline.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/session_cache.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/session_cache.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/session_ticket.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/session_ticket.t Changed

@@ -12,6 +12,19 @@
 
 plan tests => 6;
 
+# create two servers with the same session ticket callback
+my (@server,@saddr);
+for (1,2) {
+    my $server = IO::Socket::INET->new(
+	LocalAddr => '127.0.0.1',
+	LocalPort => 0,
+	Listen => 2,
+    ) or die "failed to create listener: $!";
+    push @server,{ fd => $server };
+    push @saddr, $server->sockhost.':'.$server->sockport;
+    diag("listen at $saddr-1");
+}
+
 # create some self signed certificate
 my ($cert,$key) = CERT_create(CA => 1,
     subject => { CN => 'ca' },
@@ -24,21 +37,14 @@
 my ($server_cert,$server_key) = CERT_create(
     issuer =>  $cert,$key,
     subject => { CN => 'server' },
+    subjectAltNames => 
+	 DNS => 'server' ,
+	 IP => $saddr0=~m{^(.*):} && $1 ,
+	 IP => $saddr1=~m{^(.*):} && $1 ,
+    ,
     purpose => { server => 1 }
 );
 
-# create two servers with the same session ticket callback
-my (@server,@saddr);
-for (1,2) {
-    my $server = IO::Socket::INET->new(
-	LocalAddr => '127.0.0.1',
-	LocalPort => 0,
-	Listen => 2,
-    ) or die "failed to create listener: $!";
-    push @server,{ fd => $server };
-    push @saddr, $server->sockhost.':'.$server->sockport;
-    diag("listen at $saddr-1");
-}
 
 defined( my $pid = fork() ) || die $!;
 exit(_server()) if ! $pid;
@@ -57,6 +63,10 @@
     SSL_key => $client_key,
     SSL_ca =>  $cert ,
 
+    # LibreSSL has currently no support for TLS 1.3 session handling
+    # therefore enforce TLS 1.2
+    Net::SSLeay::constant("LIBRESSL_VERSION_NUMBER") ?
+	(SSL_version => 'TLSv1_2') :
     # versions of Net::SSLeay with support for SESSION_up_ref have also the
     # other functionality needed for proper TLS 1.3 session handling
     defined(&Net::SSLeay::SESSION_up_ref) ? ()

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/sessions.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/sessions.t Changed

@@ -43,13 +43,17 @@
     $what = 'client';
     @servers = ();
     my $ctx = IO::Socket::SSL::SSL_Context->new(
-	 SSL_ca_file => "certs/test-ca.pem",
-	 # make cache large enough since we get multiple tickets with TLS 1.3
-	 SSL_session_cache_size => 100,
+	SSL_ca_file => "t/certs/test-ca.pem",
+	# make cache large enough since we get multiple tickets with TLS 1.3
+	SSL_session_cache_size => 100,
+	# LibreSSL has currently no support for TLS 1.3 session handling
+	# therefore enforce TLS 1.2
+	Net::SSLeay::constant("LIBRESSL_VERSION_NUMBER") ?
+	    (SSL_version => 'TLSv1_2') :
 	# versions of Net::SSLeay with support for SESSION_up_ref have also the
 	# other functionality needed for proper TLS 1.3 session handling
-	defined(&Net::SSLeay::SESSION_up_ref) ? ()
-	    : (SSL_version => 'SSLv23:!TLSv1_3:!SSLv3:!SSLv2'),
+	defined(&Net::SSLeay::SESSION_up_ref) ? () :
+	    (SSL_version => 'SSLv23:!TLSv1_3:!SSLv3:!SSLv2'),
     );
 
     my $cache = $ctx->{session_cache} or do {
@@ -112,9 +116,9 @@
     my @ctx = map {
 	IO::Socket::SSL::SSL_Context->new(
 	    SSL_server => 1,
-	    SSL_cert_file => "certs/server-cert.pem",
-	    SSL_key_file => "certs/server-key.pem",
-	    SSL_ca_file => "certs/test-ca.pem",
+	    SSL_cert_file => "t/certs/server-cert.pem",
+	    SSL_key_file => "t/certs/server-key.pem",
+	    SSL_ca_file => "t/certs/test-ca.pem",
 	);
     } @servers;
     my @clients;

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/set_curves.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/set_curves.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/signal-readline.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/signal-readline.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/sni.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/sni.t Changed

@@ -23,18 +23,18 @@
     Listen => 2,
     ReuseAddr => 1,
     SSL_server => 1,
-    SSL_ca_file => "certs/test-ca.pem",
+    SSL_ca_file => "t/certs/test-ca.pem",
     SSL_cert_file => {
-	'server.local' => 'certs/server-cert.pem',
-	'server2.local' => 'certs/server2-cert.pem',
-	'smtp.mydomain.local' => "certs/server-wildcard.pem",
-	'' => "certs/server-wildcard.pem",
+	'server.local' => 't/certs/server-cert.pem',
+	'server2.local' => 't/certs/server2-cert.pem',
+	'smtp.mydomain.local' => "t/certs/server-wildcard.pem",
+	'' => "t/certs/server-wildcard.pem",
     },
     SSL_key_file => {
-	'server.local' => 'certs/server-key.pem',
-	'server2.local' => 'certs/server2-key.pem',
-	'smtp.mydomain.local' => "certs/server-wildcard.pem",
-	'' => "certs/server-wildcard.pem",
+	'server.local' => 't/certs/server-key.pem',
+	'server2.local' => 't/certs/server2-key.pem',
+	'smtp.mydomain.local' => "t/certs/server-wildcard.pem",
+	'' => "t/certs/server-wildcard.pem",
     },
 );
 
@@ -62,12 +62,14 @@
 	    Domain => AF_INET,
 	    SSL_verify_mode => 1,
 	    SSL_hostname => $host,
-	    SSL_ca_file => 'certs/test-ca.pem',
+	    SSL_ca_file => 't/certs/test-ca.pem',
 	);
 	if ($client) {
 	    print "ok # client ssl connect $host\n";
 	    $client->verify_hostname($host,'http') or print "not ";
 	    print "ok # client verify hostname in cert $host\n";
+	    # wait for server to send something to make sure finished accept
+	    <$client>;
 	} else {
 	    print "not ok # client ssl connect $host - $SSL_ERROR\n";
 	    print "ok # skip connect failed\n";
@@ -83,6 +85,7 @@
 	my $name = $csock->get_servername;
 	print "not " if ! $name or $name ne $host;
 	print "ok # server got SNI name $host\n";
+	print $csock "hi\n";
     } else {
 	print "not ok # server accept - $SSL_ERROR\n";
 	print "ok # skip accept failed\n";

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/sni_verify.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/sni_verify.t Changed

@@ -23,18 +23,18 @@
     Listen => 2,
     ReuseAddr => 1,
     SSL_server => 1,
-    SSL_ca_file => "certs/test-ca.pem",
+    SSL_ca_file => "t/certs/test-ca.pem",
     SSL_cert_file => {
-	'server.local' => 'certs/server-cert.pem',
-	'server2.local' => 'certs/server2-cert.pem',
-	'smtp.mydomain.local' => "certs/server-wildcard.pem",
-	'' => "certs/server-wildcard.pem",
+	'server.local' => 't/certs/server-cert.pem',
+	'server2.local' => 't/certs/server2-cert.pem',
+	'smtp.mydomain.local' => "t/certs/server-wildcard.pem",
+	'' => "t/certs/server-wildcard.pem",
     },
     SSL_key_file => {
-	'server.local' => 'certs/server-key.pem',
-	'server2.local' => 'certs/server2-key.pem',
-	'smtp.mydomain.local' => "certs/server-wildcard.pem",
-	'' => "certs/server-wildcard.pem",
+	'server.local' => 't/certs/server-key.pem',
+	'server2.local' => 't/certs/server2-key.pem',
+	'smtp.mydomain.local' => "t/certs/server-wildcard.pem",
+	'' => "t/certs/server-wildcard.pem",
     },
     SSL_verify_mode => 1
 );
@@ -63,14 +63,16 @@
 	    Domain => AF_INET,
 	    SSL_verify_mode => 1,
 	    SSL_hostname => $host,
-	    SSL_ca_file => 'certs/test-ca.pem',
-            SSL_cert_file => 'certs/client-cert.pem',
-            SSL_key_file => 'certs/client-key.pem',
+	    SSL_ca_file => 't/certs/test-ca.pem',
+            SSL_cert_file => 't/certs/client-cert.pem',
+            SSL_key_file => 't/certs/client-key.pem',
 	);
 	if ($client) {
 	    print "ok # client ssl connect $host\n";
 	    $client->verify_hostname($host,'http') or print "not ";
 	    print "ok # client verify hostname in cert $host\n";
+	    # wait for server to send something to make sure finished accept
+	    <$client>;
 	} else {
 	    print "not ok # client ssl connect $host - $SSL_ERROR\n";
 	    print "ok # skip connect failed\n";
@@ -86,6 +88,7 @@
 	my $name = $csock->get_servername;
 	print "not " if ! $name or $name ne $host;
 	print "ok # server got SNI name $host\n";
+	print $csock "hi\n";
     } else {
 	print "not ok # server accept - $SSL_ERROR\n";
 	print "ok # skip accept failed\n";

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/start-stopssl.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/start-stopssl.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/startssl.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/startssl.t Changed

@@ -47,8 +47,8 @@
 
     unless ( IO::Socket::SSL->start_SSL( $client,
 	SSL_verify_mode => 0,
-	SSL_cert_file => "certs/client-cert.pem",
-	SSL_key_file => "certs/client-key.enc",
+	SSL_cert_file => "t/certs/client-cert.pem",
+	SSL_key_file => "t/certs/client-key.enc",
 	SSL_passwd_cb => sub { return "opossum" }
     )) {
 	#DEBUG( $SSL_ERROR );
@@ -64,7 +64,7 @@
     $client->sock_certificate('issuer') =~ /IO::Socket::SSL Demo CA/ or print "not ";
     ok("client local certificate issuer");
     $client->get_fingerprint('sha256',$client->sock_certificate)
-	eq $getfp->('certs/client-cert.pem')
+	eq $getfp->('t/certs/client-cert.pem')
 	or print "not ";
     ok("client local certificate fingerprint");
 
@@ -73,7 +73,7 @@
     $client->peer_certificate('issuer') =~ /IO::Socket::SSL Demo CA/ or print "not ";
     ok("client peer certificate issuer");
     $client->get_fingerprint()
-	eq $getfp->('certs/server-cert.pem')
+	eq $getfp->('t/certs/server-cert.pem')
 	or print "not ";
     ok("client peer certificate fingerprint");
 
@@ -89,9 +89,9 @@
 IO::Socket::SSL->start_SSL( $csock,
     SSL_server => 1,
     SSL_verify_mode => SSL_VERIFY_PEER|SSL_VERIFY_FAIL_IF_NO_PEER_CERT,
-    SSL_ca_file => "certs/test-ca.pem",
-    SSL_cert_file => "certs/server-cert.pem",
-    SSL_key_file => "certs/server-key.enc",
+    SSL_ca_file => "t/certs/test-ca.pem",
+    SSL_cert_file => "t/certs/server-cert.pem",
+    SSL_key_file => "t/certs/server-key.enc",
     SSL_passwd_cb => sub { return "bluebell" },
 ) || print "not ";
 #DEBUG( $IO::Socket::SSL::ERROR );
@@ -105,7 +105,7 @@
 $csock->sock_certificate('issuer') =~ /IO::Socket::SSL Demo CA/ or print "not ";
 ok("server local certificate issuer");
 $csock->get_fingerprint('sha256',$csock->sock_certificate)
-    eq $getfp->('certs/server-cert.pem')
+    eq $getfp->('t/certs/server-cert.pem')
     or print "not ";
 ok("server local certificate fingerprint");
 
@@ -114,7 +114,7 @@
 $csock->peer_certificate('issuer') =~ /IO::Socket::SSL Demo CA/ or print "not ";
 ok("server peer certificate issuer");
 $csock->get_fingerprint()
-    eq $getfp->('certs/client-cert.pem')
+    eq $getfp->('t/certs/client-cert.pem')
     or print "not ";
 ok("server peer certificate fingerprint");

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/sysread_write.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/sysread_write.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/verify_fingerprint.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/verify_fingerprint.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/verify_hostname.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/verify_hostname.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/verify_partial_chain.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/verify_partial_chain.t Changed

Changes of Revision 2