开源软件构建与测试

_service:tar_scm:perl-IO-Socket-SSL.spec Changed

_service Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/client-cert.pem Deleted

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQjCCAiqgAwIBAgIFAPq2L4EwDQYJKoZIhvcNAQELBQAwIjEgMB4GA1UEAwwX
-SU86OlNvY2tldDo6U1NMIERlbW8gQ0EwHhcNMjEwODE2MDgyNjQ5WhcNMzEwODE0
-MDgyNjQ5WjAXMRUwEwYDVQQDDAxjbGllbnQubG9jYWwwggEiMA0GCSqGSIb3DQEB
-AQUAA4IBDwAwggEKAoIBAQC5Jm80NmZPNGFHEZxsNJ++TV1bSuMGm0E7bNzK8McZ
-vIt9hdX0QnAiKdiNDXOve4lLWTTogA0ZRD+YBwz5wFSSNrkXNNIbf3OsQrzVO0S4
-iKK8khEskzgVzCbw7H3zHJlNI/Ur6Vf5jlXrejRxrzZSTTSuE0mGvPnFmUO3msNC
-yYNlfgy+P43Y5iU5rTakyM4Z3s5VmIcYR3rtLKCV5RPYdbYFruViGCfm8UoKlyMk
-He2EC/GIaCE98UIi3sU9I3PC2nq7t/lHoSgUlrRI7oDddkQPsbzF2Ug8i1rq+FM2
-pwEsZ7ORytVsyEY6U30om6TzKTGhABo3CWrHci2I0vUFAgMBAAGjgYkwgYYwHQYD
-VR0OBBYEFOx484tqPH/BQYKPrwIHoBRGpqimMB8GA1UdIwQYMBaAFLnih3fCc4yg
-dSimBeBYvU5gw983MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMBEGCWCG
-SAGG+EIBAQQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAjANBgkqhkiG9w0BAQsF
-AAOCAQEAU/fWJ+Mgcq9R/wtDEJZ14UzZEsdLMgLq35FyHygyaTeHMw7XXXwRcen4
-wVIgPtP0A6QqeCUZKfjC/oUZRhcF91/0jBkuqieaoY286gN857b1U8CEj5tZ8Wcd
-ALLObbfd0a/wPxFqGRVJREu6DhzUVTcDoDWijAm0AxicvLtmfD7wvFGGiZPGCo7x
-82lH7ZGqjasdw+Q804LIynLWF93G5bR/BWXdw2LnEmCPrrqdzIymr1vkgSOYQaHx
-PUKQnkGv4jJd2mu/tMQqrH+c0KgL1yozhGCYg8K95VfY1pQR59oM1ephm0dbg5JP
-Fx4eW9n6OdBdAldA5dQUqaxCh+haGw==
------END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/client-key.enc Deleted

@@ -1,27 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpQIBAAKCAQEAuSZvNDZmTzRhRxGcbDSfvk1dW0rjBptBO2zcyvDHGbyLfYXV
-9EJwIinYjQ1zr3uJS1k06IANGUQ/mAcM+cBUkja5FzTSG39zrEK81TtEuIiivJIR
-LJM4Fcwm8Ox98xyZTSP1K+lX+Y5V63o0ca82Uk00rhNJhrz5xZlDt5rDQsmDZX4M
-vj+N2OYlOa02pMjOGd7OVZiHGEd67SygleUT2HW2Ba7lYhgn5vFKCpcjJB3thAvx
-iGghPfFCIt7FPSNzwtp6u7f5R6EoFJa0SO6A3XZED7G8xdlIPIta6vhTNqcBLGez
-kcrVbMhGOlN9KJuk8ykxoQAaNwlqx3ItiNL1BQIDAQABAoIBAAGp+8PfXUoG8Xzf
-BqXeTzU5osYoRSQRDyQGlXFpepCbpjFJm6OnWTSlZaHW5hxEovY/Zf9U70kz2NJ3
-9cDk3p21yjIQMnc2zQZWTzYnYzW5XKUPNwJMjGt9uzfdGECwGByeXxy26yh+A/2q
-yn/fEEDrGrcZy0ZfumrxNq+Wv3yBKTZBKYsvz9SFkLsbv91FWNciQOSgbQ3PRKWW
-So0qoNZVc8/XLVs2+Sa54xc80e4ys+UY+t8wQSCYRKYcwghLT2HftdEM+h8zCgmX
-sWP6G6yM1/LRbeF1DKk0ES1q6+ntXBWPisrdbHeJQ1OetOTImXrw/9GrUGTlSGsU
-QHLPiGECgYEA6DdkegpHNvbF+tadHhOlpXxVBDXCqrE+jgnnnPX2n8zOfhTTcPkz
-P8xUSOhQ8F3/d+na/YJkNLBcUdHEgPQlQNaZWiEebg3RjI/T2c0A4VJSqDWODvG3
-Hsujcj0ZL9rWtHsc+9P8XEmO6MMXBz+cBu3X3nShzLRKeUbGkPNHs90CgYEAzBz8
-iksRinW6ySuny6CxPGZMfozKQ75BqgRUKor9qfTtIaWrjy/QUdnWBW0R+Bce2oZA
-nQX14OIp6aHElKuBmWqxZdCVjqBQl1URh5y+ZlH6GgsWxVkpf9LRJHK34H2YqU3s
-P5rxGYkLyb2h8SIn7HRgNOSYhC8Ab9L1tHZCJ0kCgYEA0HgiENm3UyW5WNZgmQbE
-V8tFu5DT4U9bvEIyFxxNOuqvmkryA2ME2kqChC1jtFZ+qVVdTudHNHH7f0yVX7tO
-0mWVqG9BFUX8kHbyln5PQvkX0YC6trnTTqc8ZatqOCb7R22a+I036lXzIQ07WDuH
-xESz3jbQpqhYj4W1b52oClUCgYEAhT5O5YBHvRlJi9WBvf3ydTlaqioCR+LFPtWA
-lB0TpoUK37Ikol5WIXiQrA4dctS1AXYua9LeRaWeMrO1fk/PVHU/xPU7DFY/Bes0
-fFCoQmc1WxbuEHo6CwV2HdL9kgCrTapelM7yoPbDyTiPpLflVAhMXXr0zSVZpaYT
-W3DvknECgYEAjm126O1/vQX0Ed2jbhsRMfhX+r4nPOCrpqCDemDitcMT0ASwLv/S
-R8pWv2HNPDZZcytWVh9ORHyFhA+hfoLpHZQNgViCNOI92c9ytphIWPdKhE4pMAWX
-bnASqDwRaDFFnxp5TqOdwce4DFxQxQcxOPp6T6Ax7HZfHueeMjxw/Gw=
------END RSA PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/client-key.pem Deleted

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQC5Jm80NmZPNGFH
-EZxsNJ++TV1bSuMGm0E7bNzK8McZvIt9hdX0QnAiKdiNDXOve4lLWTTogA0ZRD+Y
-Bwz5wFSSNrkXNNIbf3OsQrzVO0S4iKK8khEskzgVzCbw7H3zHJlNI/Ur6Vf5jlXr
-ejRxrzZSTTSuE0mGvPnFmUO3msNCyYNlfgy+P43Y5iU5rTakyM4Z3s5VmIcYR3rt
-LKCV5RPYdbYFruViGCfm8UoKlyMkHe2EC/GIaCE98UIi3sU9I3PC2nq7t/lHoSgU
-lrRI7oDddkQPsbzF2Ug8i1rq+FM2pwEsZ7ORytVsyEY6U30om6TzKTGhABo3CWrH
-ci2I0vUFAgMBAAECggEAAan7w99dSgbxfN8Gpd5PNTmixihFJBEPJAaVcWl6kJum
-MUmbo6dZNKVlodbmHESi9j9l/1TvSTPY0nf1wOTenbXKMhAydzbNBlZPNidjNblc
-pQ83AkyMa327N90YQLAYHJ5fHLbrKH4D/arKf98QQOsatxnLRl+6avE2r5a/fIEp
-NkEpiy/P1IWQuxu/3UVY1yJA5KBtDc9EpZZKjSqg1lVzz9ctWzb5JrnjFzzR7jKz
-5Rj63zBBIJhEphzCCEtPYd+10Qz6HzMKCZexY/obrIzX8tFt4XUMqTQRLWrr6e1c
-FY+Kyt1sd4lDU5605MiZevD/0atQZOVIaxRAcs+IYQKBgQDoN2R6Ckc29sX61p0e
-E6WlfFUENcKqsT6OCeec9fafzM5+FNNw+TM/zFRI6FDwXf936dr9gmQ0sFxR0cSA
-9CVA1plaIR5uDdGMj9PZzQDhUlKoNY4O8bcey6NyPRkv2ta0exz70/xcSY7owxcH
-P5wG7dfedKHMtEp5RsaQ80ez3QKBgQDMHPyKSxGKdbrJK6fLoLE8Zkx+jMpDvkGq
-BFQqiv2p9O0hpauPL9BR2dYFbRH4Fx7ahkCdBfXg4inpocSUq4GZarFl0JWOoFCX
-VRGHnL5mUfoaCxbFWSl/0tEkcrfgfZipTew/mvEZiQvJvaHxIifsdGA05JiELwBv
-0vW0dkInSQKBgQDQeCIQ2bdTJblY1mCZBsRXy0W7kNPhT1u8QjIXHE066q+aSvID
-YwTaSoKELWO0Vn6pVV1O50c0cft/TJVfu07SZZWob0EVRfyQdvKWfk9C+RfRgLq2
-udNOpzxlq2o4JvtHbZr4jTfqVfMhDTtYO4fERLPeNtCmqFiPhbVvnagKVQKBgQCF
-Pk7lgEe9GUmL1YG9/fJ1OVqqKgJH4sU+1YCUHROmhQrfsiSiXlYheJCsDh1y1LUB
-di5r0t5FpZ4ys7V+T89UdT/E9TsMVj8F6zR8UKhCZzVbFu4QejoLBXYd0v2SAKtN
-ql6UzvKg9sPJOI+kt+VUCExdevTNJVmlphNbcO+ScQKBgQCObXbo7X+9BfQR3aNu
-GxEx+Ff6vic84KumoIN6YOK1wxPQBLAu/9JHyla/Yc08NllzK1ZWH05EfIWED6F+
-gukdlA2BWII04j3Zz3K2mEhY90qETikwBZducBKoPBFoMUWfGnlOo53Bx7gMXFDF
-BzE4+npPoDHsdl8e554yPHD8bA==
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/create-certs.pl Deleted

@@ -1,129 +0,0 @@
-use strict;
-use warnings;
-use IO::Socket::SSL::Utils;
-use Net::SSLeay;
-
-my $dir = "./";
-my $now = time();
-my $later = $now + 10*365*86400;
-
-Net::SSLeay::SSLeay_add_ssl_algorithms();
-my $sha256 = Net::SSLeay::EVP_get_digestbyname('sha256') or die;
-my $printfp = sub {
-    my ($w,$cert) = @_;
-    print $w.' sha256$'.unpack('H*',Net::SSLeay::X509_digest($cert, $sha256))."\n"
-};
-
-my %time_valid = (not_before => $now, not_after => $later);
-
-my @ca = CERT_create(
-    CA => 1,
-    subject => { CN => 'IO::Socket::SSL Demo CA' },
-    %time_valid,
-);
-save('test-ca.pem',PEM_cert2string($ca0));
-
-my @server = CERT_create(
-    CA => 0,
-    subject => { CN => 'server.local' },
-    purpose => 'server',
-    issuer => \@ca,
-    %time_valid,
-);
-save('server-cert.pem',PEM_cert2string($server0));
-save('server-key.pem',PEM_key2string($server1));
-$printfp->(server => $server0);
-
-@server = CERT_create(
-    CA => 0,
-    subject => { CN => 'server2.local' },
-    purpose => 'server',
-    issuer => \@ca,
-    %time_valid,
-);
-save('server2-cert.pem',PEM_cert2string($server0));
-save('server2-key.pem',PEM_key2string($server1));
-$printfp->(server2 => $server0);
-
-@server = CERT_create(
-    CA => 0,
-    subject => { CN => 'server-ecc.local' },
-    purpose => 'server',
-    issuer => \@ca,
-    key => KEY_create_ec(),
-    %time_valid,
-);
-save('server-ecc-cert.pem',PEM_cert2string($server0));
-save('server-ecc-key.pem',PEM_key2string($server1));
-$printfp->('server-ecc' => $server0);
-
-
-my @client = CERT_create(
-    CA => 0,
-    subject => { CN => 'client.local' },
-    purpose => 'client',
-    issuer => \@ca,
-    %time_valid,
-);
-save('client-cert.pem',PEM_cert2string($client0));
-save('client-key.pem',PEM_key2string($client1));
-$printfp->(client => $client0);
-
-my @swc = CERT_create(
-    CA => 0,
-    subject => { CN => 'server.local' },
-    purpose => 'server',
-    issuer => \@ca,
-    subjectAltNames =>  
-	 DNS => '*.server.local' ,
-	 IP => '127.0.0.1' ,
-	 DNS => 'www*.other.local' ,
-	 DNS => 'smtp.mydomain.local' ,
-	 DNS => 'xn--lwe-sna.idntest.local' 
-    ,
-    %time_valid,
-);
-save('server-wildcard.pem',PEM_cert2string($swc0),PEM_key2string($swc1));
-
-
-my @subca = CERT_create(
-    CA => 1,
-    issuer => \@ca,
-    subject => { CN => 'IO::Socket::SSL Demo Sub CA' },
-    %time_valid,
-);
-save('test-subca.pem',PEM_cert2string($subca0));
-@server = CERT_create(
-    CA => 0,
-    subject => { CN => 'server.local' },
-    purpose => 'server',
-    issuer => \@subca,
-    %time_valid,
-);
-save('sub-server.pem',PEM_cert2string($server0).PEM_key2string($server1));
-
-
-
-my @cap = CERT_create(
-    CA => 1,
-    subject => { CN => 'IO::Socket::SSL::Intercept' },
-    %time_valid,
-);
-save('proxyca.pem',PEM_cert2string($cap0).PEM_key2string($cap1));
-
-sub save {
-    my $file = shift;
-    open(my $fd,'>',$dir.$file) or die $!;
-    print $fd @_;
-}
-
-system(<<CMD);
-cd $dir
-set -x
-openssl x509 -in server-cert.pem -out server-cert.der -outform der
-openssl rsa -in server-key.pem -out server-key.der -outform der
-openssl rsa -in server-key.pem -out server-key.enc -passout pass:bluebell
-openssl rsa -in client-key.pem -out client-key.enc -passout pass:opossum
-openssl pkcs12 -export -in server-cert.pem -inkey server-key.pem -out server.p12 -descert -passout pass:
-openssl pkcs12 -export -in server-cert.pem -inkey server-key.pem -out server_enc.p12 -descert -passout pass:bluebell
-CMD

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/proxyca.pem Deleted

@@ -1,48 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDPjCCAiagAwIBAgIEbhKxVTANBgkqhkiG9w0BAQsFADAlMSMwIQYDVQQDDBpJ
-Tzo6U29ja2V0OjpTU0w6OkludGVyY2VwdDAeFw0yMTA4MTYwODI2NDlaFw0zMTA4
-MTQwODI2NDlaMCUxIzAhBgNVBAMMGklPOjpTb2NrZXQ6OlNTTDo6SW50ZXJjZXB0
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf53vfkt/sNh7HXvfdcb
-ynxHg4Ufy5WJYE7O1qlYA6y9SHp5wwd4Eh+81LDc9hk+c37+tiY8cjp6sLPi76O2
-EeMgTdauWPh4qk2sFic+noIHbTPvMeBiROsyGMbJ5meRsXZsIJHljEDeVqqjmLUx
-cUK+uLA7P1tz9lA+6dJNtEJ4armRSUCm+pL8BMrqPiDYh0M8SyhlBsTUc5sInwnP
-zAEHVo3k6h3o5n0eWtts+0g0xo494pxxoi4ZBKwm04uNRRK0sOnAXD0rrVX1LQaW
-4kUS36VOK5n1T/Sxiw6oXasFsqxOqapJf//iWwPKX6z473O8YbIaQckBOaFk04pI
-FwIDAQABo3YwdDAdBgNVHQ4EFgQUwQesSTGKj0iuQH8Xu3HHstksbIMwHwYDVR0j
-BBgwFoAUwQesSTGKj0iuQH8Xu3HHstksbIMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
-HQ8BAf8EBAMCAoQwEQYJYIZIAYb4QgEBBAQDAgAHMA0GCSqGSIb3DQEBCwUAA4IB
-AQB/tJCdy7/aBVu6r8sv7Eu3VMkABqEg2+WY1xqa1O358rwWKZzjZuOOFXJfbOp5
-6KIaUqkAX3QMfK0eeh8ggwik6E2BCdEEAUzZTRt2oPqD8gXQdhADbkXneLGtKdMJ
-OJQYxx/z/QckUR8iRN6U+CpXlIvdq/n9eii5raCKixwZfpY+sxEEyYUtu/1M/xJ7
-4aWYDSBH4ixOHR675mKLtAYcBzIuXWPSHiCuojqDf+I4yqFemrEKoOvVBmkD0q81
-hJT70UhYVi/E0KkE/z9pcn+tWEZnpw6ynUUpUrGqZPgDD/LQ8P9YsV8rf+Hl+6R6
-ymg3f+Ipz95nM8o1I/9yNeIZ
------END CERTIFICATE-----
------BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDJ/ne9+S3+w2Hs
-de991xvKfEeDhR/LlYlgTs7WqVgDrL1IennDB3gSH7zUsNz2GT5zfv62JjxyOnqw
-s+Lvo7YR4yBN1q5Y+HiqTawWJz6eggdtM+8x4GJE6zIYxsnmZ5GxdmwgkeWMQN5W
-qqOYtTFxQr64sDs/W3P2UD7p0k20QnhquZFJQKb6kvwEyuo+INiHQzxLKGUGxNRz
-mwifCc/MAQdWjeTqHejmfR5a22z7SDTGjj3inHGiLhkErCbTi41FErSw6cBcPSut
-VfUtBpbiRRLfpU4rmfVP9LGLDqhdqwWyrE6pqkl//+JbA8pfrPjvc7xhshpByQE5
-oWTTikgXAgMBAAECggEBAIWo8scsaXkZBGUZrP3SJzuXfSLUJjPqoVqvC0MUD39v
-AFlDYerhuFwV0DfVSIE4NxDpydXx+zGC7MicX+A+ri2r4yZelkOdNwtKFkMaeN8e
-H5ftM6wHVD9SenXWpKbnhYquV+I9aG2kRvuGMnbL/wl5JwbC5pGIDHXCp77FQFG0
-M0pvjRV5pOQYLH59zH/bKLvpinEJ/87mKcDeHPyr3l1nKVqqapO8tKmasvNmvv9T
-HfreuTqouiOnaGhKqBGuAFmG4Ljt83fH0GUwtgkilCePkta17HqXvu2fa7fA1Ggc
-nrp5sHrmWZS8/GYlK1bygSBSKF6VMJ7pCHPBFbXVakECgYEA/3Hq8DApjPO0rcFo
-xurzty7bCWUyD1mSljo5fhAszcCou9f+Al3XBVtMYDvaWHrHqW0atl0b6Zq1SVA/
-0Tc8UwIpEeA1QbDvY9J74age+rmmV+jdl0RrtaPR/L/5zeuhidRTvwz4wY3O144O
-Pg12+SNLuttCQlIH6VQpF3oLv6cCgYEAym7R3fpdj4PDTQH/T9ZfOMBTefJADKLm
-s4oCH0GPq12LYIjYy2H6f5+km7Rhs7ZEp3Xyr0QJDozOIu4ypVNzhUJKnOzJ6M+f
-8+knoDTFPtnoZoKxvE6v0N9NhTrWodbw5dZKnKSZUy0sZUFWlrLG72e8CxuOLdcF
-kBr3xKMKwhECgYBufRystXhTclo1SdIDMD8ofcjaQH4tq4W/GwIhJ+fpOysAzQUe
-iu5lb78SZPElkj3oZ7vFI3LeUT+WrXJdETIziVywUbVXa6uwFqvkyC5WLpTns16d
-fkfEck5yr6riScg+cKukmHzEY40TKWu5pWNPkdfAw/Pd8dNgNjnr4KtSQwKBgGyb
-Qjt+7J1nyutQ7AKQd+wBu4eMgfKFn5Kps3PDf+onuPRk1zNe8L9yDiV/hH+fhXv2
-2upPbTCCOMIi28c5W5weMdu5aqZeZmm9KIZaaYzL6lS9P9BQwyEj/PpC1A5mPD6D
-VuptoNkwPkZg5KzbY8Hj/M5UzVYoq5Jh9ZZpBweRAoGBAI7ywjsgfOnSMyZ0IV90
-3Za6UEV1bLfw8j6Qjn+j9kL2sILLqYYcE4OQVj9rrnpjwkQKy3ETi3kcxcbfyiqb
-hvAObVbNXDzPtvaQJDoloUc0r+8Y9jpg32yx6ylBZlfhSi4gd2R5N0iAAYAweHaB
-FH8O+uATNV5RMkp5cbg2QOhD
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-cert.der Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-cert.pem Deleted

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQjCCAiqgAwIBAgIFAJcODeEwDQYJKoZIhvcNAQELBQAwIjEgMB4GA1UEAwwX
-SU86OlNvY2tldDo6U1NMIERlbW8gQ0EwHhcNMjEwODE2MDgyNjQ5WhcNMzEwODE0
-MDgyNjQ5WjAXMRUwEwYDVQQDDAxzZXJ2ZXIubG9jYWwwggEiMA0GCSqGSIb3DQEB
-AQUAA4IBDwAwggEKAoIBAQDugv6NC8y97dzaoxwccE0TVsWHK9idhlkQXtGxLXIj
-9DvJcn3+c8wAkf1M2soCHWAbltdzu7P5NsejEfuA9eQccPHKYYtnyqoqYpyhCEwt
-swU/y9CJ2/Fu95xLEpGvuiZuL4ow/PJ5Fp85AyTIZZhPbNQ/ogQlWrNd6M4NWmvZ
-f/d0HjH5KPcIF0/eVrYSnwMseG94gOyYuT7pf4FTDVZi7n0YKc64ut+cR4Tu6Unk
-1VYN2mTzKtq6/c03DNBxGNJ7LGNc8ocrCeNzXRQKzdnRZLwuk7DFusIt9M1dU+lB
-z63QsE5QUY8Tz8lktPwLKFlDma7NwFcGOzQpDoO8GozvAgMBAAGjgYkwgYYwHQYD
-VR0OBBYEFI3FHxRhhjBnD4GL5TVJzbbh4HRnMB8GA1UdIwQYMBaAFLnih3fCc4yg
-dSimBeBYvU5gw983MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMBEGCWCG
-SAGG+EIBAQQEAwIGQDATBgNVHSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsF
-AAOCAQEAkXnz0QjXU7A7prqLPWdBCmk6r0at7CvHYcKmuJ0NeCElYstgPDoMnJMt
-d2uaQJ6lU7rIIKGwJF7hhSeZmB4GB3vxJtRZzLgcPo/yupACR6vpZW6gC8gPETvL
-OeyVYTMHTt8F5D6xLKA/z+HWjMLk8k/oMW9TEE0JK5vDTjdqEXPTfZoYLaoE2uxO
-LBuVQgAhLxjASw4pnjV1tmVDaaGIMFLRbCcnIvKB5z1AsmEZWDUEntnBKl3SiSq4
-NgfJo4OXxZGSm8d7qMh9Sl1VZcHwqx3gaWSLRzeemTGtzyYOx1YWTrV9LX7XO4MW
-5bsTo1hTJcz2FaDqY3RI5b82DgfUjw==
------END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-ecc-cert.pem Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-ecc-key.pem Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-key.der Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-key.enc Deleted

@@ -1,27 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpgIBAAKCAQEA7oL+jQvMve3c2qMcHHBNE1bFhyvYnYZZEF7RsS1yI/Q7yXJ9
-/nPMAJH9TNrKAh1gG5bXc7uz+TbHoxH7gPXkHHDxymGLZ8qqKmKcoQhMLbMFP8vQ
-idvxbvecSxKRr7ombi+KMPzyeRafOQMkyGWYT2zUP6IEJVqzXejODVpr2X/3dB4x
-+Sj3CBdP3la2Ep8DLHhveIDsmLk+6X+BUw1WYu59GCnOuLrfnEeE7ulJ5NVWDdpk
-8yrauv3NNwzQcRjSeyxjXPKHKwnjc10UCs3Z0WS8LpOwxbrCLfTNXVPpQc+t0LBO
-UFGPE8/JZLT8CyhZQ5muzcBXBjs0KQ6DvBqM7wIDAQABAoIBAQCVb2NXMa5szSwT
-nCBPvRi9Zh9KSnFkeLkypYXR8XxTBIG0/FPuadTGArHmRipM2uTNRFvm+hKPsP+x
-ruGZ8fWi0CzdtPHn7LVi6vfheNZpx4EhcGxPA4uoD+FPs+mtZP8RCB4YBVNSBJdr
-3AleuTCNis0MtVDNqp841lTLTvzFfs7bmAJbU4PJP5edShx61y70+itObtyGURsy
-qtK8lOFruX+MejO9hBB3ViDgT7OtR8lQEx/aCz9j7FmkGMLTPJb8zMbDJXwSDvoe
-lzTcyz63fMwHlS/Ey6iNjwEgkYzBMHDirA8OLjoQ1pZfxNRqBBh8kBGdBQrnm36W
-PxeBuHUpAoGBAP8FNij9uhAZzNtX0MaVcWdCMGj0/ZKCn5M6XDc7r8YVvej0Cs1M
-+aTFIAHGVXIdAQUMWCDYaTgoJ0mLRmdYcVJMbUN4EZ2QgKgq3mqcKi/lcLnjjuyJ
-/YS77moLbbR6PNrT7htIXAk/zrngi96+t3WS/hnGAj6l/R0pa7W61czFAoGBAO9t
-jE4qbKT551G5ewH0zDznmYQ3/41aQNbvZeQz1c3+4IsGtsR5FFTPuA352GrpYZh5
-aqy22iQCdUT0QAR0/I1V0gl0xBam1Jg5t3gMNmx2YJtQN4oFUIMfS1HoxeJEE+r6
-O+Ha0ZDufbIZwlqsWFWWDqdPQxlWmFdRDLnv1jYjAoGBAOnILklPqDVAYaMmkrap
-oydE7zoYdSjNZFpEourjZZTSs6ENr6VbDnQ1Xc0is4wD+L5W/adGnNalQLbT3bu5
-wVDvzS6PsJ5gLQF9Ix5agPYdgMR4TrqbGXSID9zZEz3i3UzCAcKzB+RWwT13EuIk
-tewrz5NzCPXDlxEXuq0DVSH9AoGBANrhsjevTx1PHOq4fzydl61CKTUXoHeP/+C+
-gM6rmJU2of5XB/T7n9uc/e1A8FlkvAURUrVMgIYU/TIpfPDWJh/rShW8+pqer5Hu
-icyklYh4e/7gybVTAHSuwkPCYk1k4TSayO3EBnvRm3WbWPNdxW+QvBq2OmhKowCI
-JvNAz/szAoGBAI8kIssh7ZvGFzL0l204LeQhm2ux2m1xmNP7wzRUVIRYshEDsNpd
-OJnyX2k8+LzZPRu9OTydPYxF+ZDnRxTic5i3hzaRKF2ONhj1lCRX3k2mgewPFdHb
-ZWThaOsRAa8u+JR4fo+XK8D5DwljCK4n59hYiweZpeAG3NuqG+8NjNKI
------END RSA PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-key.pem Deleted

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEwAIBADANBgkqhkiG9w0BAQEFAASCBKowggSmAgEAAoIBAQDugv6NC8y97dza
-oxwccE0TVsWHK9idhlkQXtGxLXIj9DvJcn3+c8wAkf1M2soCHWAbltdzu7P5Nsej
-EfuA9eQccPHKYYtnyqoqYpyhCEwtswU/y9CJ2/Fu95xLEpGvuiZuL4ow/PJ5Fp85
-AyTIZZhPbNQ/ogQlWrNd6M4NWmvZf/d0HjH5KPcIF0/eVrYSnwMseG94gOyYuT7p
-f4FTDVZi7n0YKc64ut+cR4Tu6Unk1VYN2mTzKtq6/c03DNBxGNJ7LGNc8ocrCeNz
-XRQKzdnRZLwuk7DFusIt9M1dU+lBz63QsE5QUY8Tz8lktPwLKFlDma7NwFcGOzQp
-DoO8GozvAgMBAAECggEBAJVvY1cxrmzNLBOcIE+9GL1mH0pKcWR4uTKlhdHxfFME
-gbT8U+5p1MYCseZGKkza5M1EW+b6Eo+w/7Gu4Znx9aLQLN208efstWLq9+F41mnH
-gSFwbE8Di6gP4U+z6a1k/xEIHhgFU1IEl2vcCV65MI2KzQy1UM2qnzjWVMtO/MV+
-ztuYAltTg8k/l51KHHrXLvT6K05u3IZRGzKq0ryU4Wu5f4x6M72EEHdWIOBPs61H
-yVATH9oLP2PsWaQYwtM8lvzMxsMlfBIO+h6XNNzLPrd8zAeVL8TLqI2PASCRjMEw
-cOKsDw4uOhDWll/E1GoEGHyQEZ0FCuebfpY/F4G4dSkCgYEA/wU2KP26EBnM21fQ
-xpVxZ0IwaPT9koKfkzpcNzuvxhW96PQKzUz5pMUgAcZVch0BBQxYINhpOCgnSYtG
-Z1hxUkxtQ3gRnZCAqCreapwqL+VwueOO7In9hLvuagtttHo82tPuG0hcCT/OueCL
-3r63dZL+GcYCPqX9HSlrtbrVzMUCgYEA722MTipspPnnUbl7AfTMPOeZhDf/jVpA
-1u9l5DPVzf7giwa2xHkUVM+4DfnYaulhmHlqrLbaJAJ1RPRABHT8jVXSCXTEFqbU
-mDm3eAw2bHZgm1A3igVQgx9LUejF4kQT6vo74drRkO59shnCWqxYVZYOp09DGVaY
-V1EMue/WNiMCgYEA6cguSU+oNUBhoyaStqmjJ0TvOhh1KM1kWkSi6uNllNKzoQ2v
-pVsOdDVdzSKzjAP4vlb9p0ac1qVAttPdu7nBUO/NLo+wnmAtAX0jHlqA9h2AxHhO
-upsZdIgP3NkTPeLdTMIBwrMH5FbBPXcS4iS17CvPk3MI9cOXERe6rQNVIf0CgYEA
-2uGyN69PHU8c6rh/PJ2XrUIpNRegd4//4L6AzquYlTah/lcH9Puf25z97UDwWWS8
-BRFStUyAhhT9Mil88NYmH+tKFbz6mp6vke6JzKSViHh7/uDJtVMAdK7CQ8JiTWTh
-NJrI7cQGe9GbdZtY813Fb5C8GrY6aEqjAIgm80DP+zMCgYEAjyQiyyHtm8YXMvSX
-bTgt5CGba7HabXGY0/vDNFRUhFiyEQOw2l04mfJfaTz4vNk9G705PJ09jEX5kOdH
-FOJzmLeHNpEoXY42GPWUJFfeTaaB7A8V0dtlZOFo6xEBry74lHh+j5crwPkPCWMI
-rifn2FiLB5ml4Abc26ob7w2M0og=
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server-wildcard.pem Deleted

@@ -1,50 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDpDCCAoygAwIBAgIEU2/kRTANBgkqhkiG9w0BAQsFADAiMSAwHgYDVQQDDBdJ
-Tzo6U29ja2V0OjpTU0wgRGVtbyBDQTAeFw0yMTA4MTYwODI2NDlaFw0zMTA4MTQw
-ODI2NDlaMBcxFTATBgNVBAMMDHNlcnZlci5sb2NhbDCCASIwDQYJKoZIhvcNAQEB
-BQADggEPADCCAQoCggEBAOWgEMbF77Jgmz9h9WHA76RGmeyZ6g34EfwdP1mGyBgT
-29QxGa1bs3N9j874lsvgpCc4HfL0zzOsa/0SEE8BM5a71QUbcDqMoKm3H9UAqmK9
-YoKaxotvqmMkXYl+d3qkF1H4zDx8ZMLFRX9o3gC2Ot043X/djiaa8BP7YdLu4Q8G
-VmSnFcpNehFkJAmt/cV3ehrJqU9oKzyDHiWB8rCxY17TU8BIgTTyQwlgnZ2oYpLU
-zuSJPem9RRQhaPnCuuqwaWG2JqDppwRuyqUictZcwUcdazpxI0YyGP0G8x3pkqTb
-Vi+BA5UgMG/GjuYcP3sx4Dxb7cmnF0kCqe7eclR3qrECAwEAAaOB7DCB6TAdBgNV
-HQ4EFgQU9T053wvf56DXyotfQv+lhyR/SR4wHwYDVR0jBBgwFoAUueKHd8JzjKB1
-KKYF4Fi9TmDD3zcwYQYDVR0RBFowWIIOKi5zZXJ2ZXIubG9jYWyHBH8AAAGCEHd3
-dyoub3RoZXIubG9jYWyCE3NtdHAubXlkb21haW4ubG9jYWyCGXhuLS1sd2Utc25h
-LmlkbnRlc3QubG9jYWwwDAYDVR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCBaAwEQYJ
-YIZIAYb4QgEBBAQDAgZAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEB
-CwUAA4IBAQCpy5NfTKJ3IYlIj+5wnJCRJQsizHUPnNnM00qlkGnDjtoJGmq4p/kX
-uJfMZqrbHYz8THz+qCGf4EeW36Bu0V5OQm2mIpJ1ufHeIMkZVOyxSzG6blZtdHRE
-SgFC1TnTA9bw9e8dlr9IuTeIfxbyq7cfyLdh/ecIlSoaQ00lPY2Hxp1IOjMIbvfT
-kb3T/WiPLs+/u8mcqABbSiFX/XHaeqUs7kkE5W3LYwAcyaH+3xVxrBkw8IBRR9yY
-+/orXxElNACATVfg+SxUSWsT7Nb1ZEkSP9njnhEYb02JbrbF+ZWTInNXS+7WPdbz
-NuvgXlercSqSM2xeaqkQQ//bjbTw4+7x
------END CERTIFICATE-----
------BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDloBDGxe+yYJs/
-YfVhwO+kRpnsmeoN+BH8HT9ZhsgYE9vUMRmtW7NzfY/O+JbL4KQnOB3y9M8zrGv9
-EhBPATOWu9UFG3A6jKCptx/VAKpivWKCmsaLb6pjJF2Jfnd6pBdR+Mw8fGTCxUV/
-aN4AtjrdON1/3Y4mmvAT+2HS7uEPBlZkpxXKTXoRZCQJrf3Fd3oayalPaCs8gx4l
-gfKwsWNe01PASIE08kMJYJ2dqGKS1M7kiT3pvUUUIWj5wrrqsGlhtiag6acEbsql
-InLWXMFHHWs6cSNGMhj9BvMd6ZKk21YvgQOVIDBvxo7mHD97MeA8W+3JpxdJAqnu
-3nJUd6qxAgMBAAECggEAJMSyqwF61jc95LJM1nBMbyOW9hnXLpFwX8xXHoDEfYaA
-hsOt9uJeI7oRUvTfQJoh7t2/fe3RV9beG9HOprfsiNBe1ciE+fsWptZZ1IOcxN7K
-bVtXO3CP+fwStjd37j1kNo3+Nhk9ESsBa9tg4QBNAKtgXF8fqfLZSnnQOjRh+UOe
-3U4yCvg33+UuAjqOquhMK6fb0uYDkaOPE1oeN8c721aSzl+zHXyO/fcjHQyrAVRK
-DPpzKc90Qf3SQzlGDibLhcm9iiyAxdw7hjr4SAyuqbaWwSwihkbU9wUj3b7W1rsV
-bdJ+GH8fusPM9pVwkBqavszUAfTxDYDqy0Zd9mYxuQKBgQD2vr0JqRiBdGsCfdnY
-0DukW5ZWAcWRfrJ+eSRdgMHF5jn9fznI0BQkXg4q3LJr2U2iiVrkfYsC/+mOqyPO
-puWe4UcXiitIBNCBBY7DFxrulK31HCihapni1lv+8f4HKotxTXthvbdv4jHd0lso
-Yb/fOawEGV7gXmn4BX0IFik5BwKBgQDuPPEKS8tFmcavS4KLxWVtJIlBxO4doPPh
-nWghwM5l7zJKFRXnpHLeQQGHSim6eCq7U/8qh4Dn1NabyCreniFNomjUiw60a6nE
-qO63PGEg8jjOMI7FneQlnWtoaoAL86d3xE+ZeWkKFPvjhDRzOcO0xD8j064pGRgH
-b3muoMKohwKBgQCOlkrHemAe7xenqPJqyGqu3/5QVVXGbmDXlUnefrl7kz+PriXG
-VfhNy8yEGGVCzaB/fMB5qdLbOOfO+jcHBItM9QIQKFg6lg2ngX6uXnvBw0mDi3Iv
-VVr4Ksee3Fjf60YJg6z5HpkSnrQSa60h+NrYNIujEsYxAl5aZVGLisLnoQKBgH3M
-dENJjoasErwRlVeU3l/pgQjXohzHFsC1y3y3QMWWrulrhOuSbI1rqhD0WmB6f6X3
-Tq/4aVsBimksI2b1/QPvlIdW/mbKyxRrV9It8ePhw5ktDtbO7t/l5gd25TJqcK3P
-XXDfKVYHipKzBrcpc2wKjISwjDBrbcLPXGOXw/IVAoGBAJb0t/E7O8MoUb74in9z
-H+XH9u8wsfd5Av1t/HKSFT26psj9jRNUrG1qhE/Nq7xD9CWqQz/2b5hv3WsyBrx9
-Gi96HjkVa8b5q56yXSrF1nnaII6omP10A1ytReM//N+D9tJCg2zRtGdVwDReBo9+
-c4tEO980MgyYSWrlbyZO0EnM
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server.p12 Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server2-cert.pem Deleted

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQjCCAiqgAwIBAgIEItYq9TANBgkqhkiG9w0BAQsFADAiMSAwHgYDVQQDDBdJ
-Tzo6U29ja2V0OjpTU0wgRGVtbyBDQTAeFw0yMTA4MTYwODI2NDlaFw0zMTA4MTQw
-ODI2NDlaMBgxFjAUBgNVBAMMDXNlcnZlcjIubG9jYWwwggEiMA0GCSqGSIb3DQEB
-AQUAA4IBDwAwggEKAoIBAQC6Zh5dqdgzcdrzpg0W6bz7N86oBak1KqH8dc888msM
-Lw39Jv0kXABDPO68hSFPKF1Fa8aIeagNU37SIYUekTgs66hxJBVMYS2KUDWe/52v
-bFKY5LuVEgkP/H2RclcFX7h9OhiUyB4z6ZlKiusXELepZDw0+EWacREhr58aTjcu
-Jjzz67jnwUKlMcy16K09XByxjYdkdZaCRMfWb8PERp036bkygp2TZxJNxP7RvvzM
-4PN8YxKFvZ+pqbyZ+bUFeDK7IuWV4Mfo3lN1KnS7xdsBoHqgJJyoAMDftXQDflNc
-f1vsKiBeaBo89Hlb3PrvfZ2Rs+FiD2ygpNeyk8zmD5CTAgMBAAGjgYkwgYYwHQYD
-VR0OBBYEFAeROxKjSDH+69hGnBP5TeUlIDaeMB8GA1UdIwQYMBaAFLnih3fCc4yg
-dSimBeBYvU5gw983MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMBEGCWCG
-SAGG+EIBAQQEAwIGQDATBgNVHSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQsF
-AAOCAQEACTR/WTdjWZu/yBcoTcyPMWUpUjKcb+mN59GSJashh0Np5CjXSwlWBceL
-Kcm4AJ8hG/iYiKdQRABknBzK+xApz25TqKSB/eeqqjer0llLt4Oapd4SW94h7HhO
-LsNx6wk2+/BK/I0mypjlilwKCk/vXdVeAkPkxeUDIhTGgNyWkRbLzdi+n/enisJo
-uOwuZLtwM1+WoRw+9TlPZLngRQK4bl1xf+toAiYhxQGId2No+NmgevHLkCMsGyhE
-/TqfpSVJNPwk5pkpwyIuDf3ZrrNeZPmEf0Rfy/RrBpZTZneuNxnd4z9Sdt6EL9Wx
-M/9opmYGFrvWJbjoi4QR4rGyk2INag==
------END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server2-key.pem Deleted

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQC6Zh5dqdgzcdrz
-pg0W6bz7N86oBak1KqH8dc888msMLw39Jv0kXABDPO68hSFPKF1Fa8aIeagNU37S
-IYUekTgs66hxJBVMYS2KUDWe/52vbFKY5LuVEgkP/H2RclcFX7h9OhiUyB4z6ZlK
-iusXELepZDw0+EWacREhr58aTjcuJjzz67jnwUKlMcy16K09XByxjYdkdZaCRMfW
-b8PERp036bkygp2TZxJNxP7RvvzM4PN8YxKFvZ+pqbyZ+bUFeDK7IuWV4Mfo3lN1
-KnS7xdsBoHqgJJyoAMDftXQDflNcf1vsKiBeaBo89Hlb3PrvfZ2Rs+FiD2ygpNey
-k8zmD5CTAgMBAAECggEAf5Er7wYyROMC6gUWqDvHbla/RBa7uvs2aUVnU1rFEE2T
-0VFBpgSg2WN2L+cc6MPDMaOU+AnqjVQ7UyxFoqnYPEX7vZLoUKGhPSuvxuVB0bDc
-xm6kQl1ZfmtatJQAIllkNa/w6sIaiYSxuGZihiKWz4MeAVJ4sD35b4h15tboxNeS
-2hcq1josrbwTM1mPt7mccAuNTKfrMaqsIvcB1Qr0jZzWzj4pQXGHcqv6fCTE7gGc
-fMukGEmDOa8LOWxPjjEUV6Q6hCkbznzJhV7JqWdDwuNH/pxs7TzH1G4cGpVrEO+J
-6XJyBFa3CnvtR79tvHdFKh8ITLFkog66zkFOhMk1oQKBgQDqWK7c17JxYa0cmjhL
-LBU7qJrrj8fVkHRPrbZqgnsukIPW5yICg9abmZnC63yHKZ42qdv6cAE6Bwm5LddZ
-CkfgoiAiKZXUHsMoj1ExqeruTBwH/1dljgB1ZiJd8q/4Dv+MiLJ1pEV5Rem4wNo8
-M2X+AvG8assrl2v4u2lQr9OtnQKBgQDLn0RpSP3iItfmeKDRYeJgq++Krwv/21ac
-p+sdauh8jfTqYbkZotoKsNyZQNVBIl4Bh2QuUoZWOqoH5QCWUnGf7FnN5mqBIuQf
-coeCz9Lb2QZE6Q7m0c0IsDhU0riLQah6YmpKjGyUrN8CnFqLEdDLFnZsllFrdV/i
-M6qhEkb37wKBgQCdBR7lSoF+Bvx/FbZyZ+8yMh7bh1NWfZvxZ2u6ogL3iE1OSUA4
-fy3kxF6KhE7EIdaouddzTmkEAIM7WMPaHVFb6kWtnj+OCa6qFp1IsZmAYe7GTQi6
-OxODlhOg72OIykPgXhd1S8RhJb8c09tmSuoj8MUYglXvt13ZI3nFXopu4QKBgQCW
-s3F2WsdMLm2L7YtYbBGXaqkHAzbmTfd0SfMA+rbGOGojbeAI0TZ+4xbhddJfOohI
-qWPDxOAXwaNF5H7iwnHF4q80bGw21xPvElyovBdbDuxM5BBbVLtiyslmPe7HYfjH
-Wz8/nV5fSvJihEWe17ioFh/fjgEEfwJP791BCL3tkQKBgQCoTiHiOrjqJ+FVVe+P
-Q/or5bAxM7dqGOsO/PuB7hlAt1PnUAREmpvc/9JVKiYbqXfZrvAshLEdyXLfY4lZ
-a8rYbh14qryMxHgw5zG2wnQIH6RCl5FlzLhtHmsfqCIwPL+T/S8OwISmO/ZmIbIp
-hxj4B/lWzb6853BwSaWkggr2kg==
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/server_enc.p12 Deleted

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/sub-server.pem Deleted

@@ -1,48 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDRTCCAi2gAwIBAgIEcocevTANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtJ
-Tzo6U29ja2V0OjpTU0wgRGVtbyBTdWIgQ0EwHhcNMjEwODE2MDgyNjQ5WhcNMzEw
-ODE0MDgyNjQ5WjAXMRUwEwYDVQQDDAxzZXJ2ZXIubG9jYWwwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQDwT9gcSLR3BElcfUwh2gAiz3npRFPveiNw/27N
-ol1HOxR4bkm2nRh3lo8CLJ8kO05bnogiKIntjyiV2M5E9ArpKAM4qRJFQIih7wzn
-d5vkbfL9fOaR9fWRX6mMmRnQS39fYx47xgZewqx1YyVMSIhYOCOn2RZ6BWt9ajM6
-6MQVtOSnzYFOoFpRXoaxWhT7bZNHuvRzA9NJVa9p3EemcTFR6wx5bgWzKrKiJGEx
-Aw73roNA8XwcO9mgMUXD2du/+gQefYHF7aBC2zhFg1jne3gtn0l9fZVPEHAkqVRr
-VWFEPB7HfIP1Ip8utg3OiVASeOQ9h4EVBD9UJ8WtueMlZCb3AgMBAAGjgYkwgYYw
-HQYDVR0OBBYEFJzWRIBp9tSSbpZ1h7P5e3u6207hMB8GA1UdIwQYMBaAFPfXq6gK
-NLs5uOprtbzW2gaCSq/KMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMBEG
-CWCGSAGG+EIBAQQEAwIGQDATBgNVHSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0B
-AQsFAAOCAQEAXTpdg83URmAgZ/OGjRlRBUpDC1StVJoxQG0oFxcd66u5nL5DDx/h
-oN66gTOkpiP02R8aGAdoSLI/I5/VKH6LN70TVrPk1+jrGvc3OvKcdNne+2K0S1NH
-DRrn7J+HmNtJmKRZzV4rHE1vQW1Ne9+tjYV0bnR+lY7F6y/CHoqE+/SEbDn8ZxIl
-GrUjcxbdaatdo9sUHgrqCpmpuu6wUuYtRJTV+/Hx9FknTC8fPBSkLsvOUXuRzTZW
-03tK2VMBp9WJMHGAVzGEqea5+JtPysl6LSjz/6zCwQvQJJVEVXxIT1KQMowKXYwk
-9N811/UAlMpoIjyYoTkCkyTTDmEUMdR2PQ==
------END CERTIFICATE-----
------BEGIN PRIVATE KEY-----
-MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQDwT9gcSLR3BElc
-fUwh2gAiz3npRFPveiNw/27Nol1HOxR4bkm2nRh3lo8CLJ8kO05bnogiKIntjyiV
-2M5E9ArpKAM4qRJFQIih7wznd5vkbfL9fOaR9fWRX6mMmRnQS39fYx47xgZewqx1
-YyVMSIhYOCOn2RZ6BWt9ajM66MQVtOSnzYFOoFpRXoaxWhT7bZNHuvRzA9NJVa9p
-3EemcTFR6wx5bgWzKrKiJGExAw73roNA8XwcO9mgMUXD2du/+gQefYHF7aBC2zhF
-g1jne3gtn0l9fZVPEHAkqVRrVWFEPB7HfIP1Ip8utg3OiVASeOQ9h4EVBD9UJ8Wt
-ueMlZCb3AgMBAAECggEAcWv+ADuAkbwANBsfV8rgzY1HaQXK5/ipyaeF0KCVjg0g
-eEb1m69B4Q+6p7gP1LX5Id0NO7IOh4VODoupr3nPvIQaISALc4wl8Og3GvilJ4eN
-bH8LBFEmelrAV4/bUyiPEaJinqu0Tf1sEGufKwYA9EJq8cnQhf8Q4LzDOUarZeJ0
-3h2qySL1kncd7OPwLX5ehsJaiX+F2d9GUlq8AYZzk7/adwVwVDNKNPPV8XbwI0Kd
-qT5MzjgnHSb6srvolB9feKZlD3aOsFoE+qQyBgkWMd4HlZ+Wph8MnujAa8EFHfQ1
-Smvo3EHntyFcTUO7zRL1r8bIUuqByLv0Godd0NfcgQKBgQD/S7GbRPs4ZlSlo5CW
-agd1QFByY9xlNex55agYnTrAS2ktylc6DrHs+7BQIZqDHNyWvavf/Tf+kWn9Sgl6
-c+e1teOWBwp+M/8uW9D7+tSJJnq9cVFwB/+DUsoY94U5U7NYMyiCd7ogET8A2/r5
-AzcO+85AUPVcEzbWzxweWyefcQKBgQDw+ZFhXP0aU0e3Pgnf4msmKdZ8RF6fBsFu
-k2PmxBHAjudzTRD5cjBJG4/AX3LcnMqzCzvkpk6HfX83DGn1ktmiVEriqNexrQ/W
-Ow8NFxEZYLCJGqVoEa/fOwjqtJZhe/6AvU1TF44BLPL/+1QZi0c9SF+0FtR8I2Wv
-4jIszcPI5wKBgDZQbVXiZCxIoSOoW9+UaUfJyhO8KSyjP09jy9KIyPIWWScz0ED6
-1WHc3lL+Azh30HqFmeaKofoYB9uqf7+8nwRq0SOfFd1pxJWhVSH26HbRZ/WcAT57
-hSH0YCjVqFNc+l/+alTvkfq2kJfnNUr7IyCd8/B9COZw9A7Ze1r9+70RAoGAXlbG
-BKD78ady5xkhkoW4vwsYDjRR+t4RMjH/pWNTM9h+YhRktdNvdd+VapGzjQzRCkE2
-pHA7RC3sdOemP97K1xM68ft53fRLw+oBHXXPWukQk8xbvx9VhAY/mmsyiF2bqFj0
-Abix/mHTjEWfihSNwj8oQH/DlgnhkHb0f7fakzcCgYAH622AVAxVv6b/ErtRVL+K
-pqLGLMyiVTY3XhVJQKc4EwB8zj/WEX3uucXoo5NIncSZABdFwKdzHBcXmfk8vK/U
-FL15J4Xd4aqh1rlA8nVgsXf60BeUvztjFGw+4bbc73RPZ36aWuTqW8BKttB5EPFz
-5AanWoJD6x6cWuiTse4Cig==
------END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/test-ca.pem Deleted

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDOTCCAiGgAwIBAgIFALYEyrwwDQYJKoZIhvcNAQELBQAwIjEgMB4GA1UEAwwX
-SU86OlNvY2tldDo6U1NMIERlbW8gQ0EwHhcNMjEwODE2MDgyNjQ5WhcNMzEwODE0
-MDgyNjQ5WjAiMSAwHgYDVQQDDBdJTzo6U29ja2V0OjpTU0wgRGVtbyBDQTCCASIw
-DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTt4hAFUSlFXx/evCMjcZJfqgvH
-kDwdr2HEC2yC+uYUluHVyn2NRSmTAuQKQuA2lCrF5F5kYTM8rzguA1ME1yJgI+ea
-ovE76evpvNxrbmLrSXBq9uVWbvc9p37VeP26zRCAYzTpeeVoSfgbDtk5iW7tuMxN
-aVN1hYubabQn+oxpJoIxXepFHz669dzOCT+m2WMHD1Q6ZcEJmvfgenpDmrTCxb+I
-1Yq8NWldvP3usZQRZOvFtQzSm97JnrVLJY57CZ6l18AC+gSHeLb+i9qWgDzLK3XX
-Qp01aQFEdcgoaEBgYQwPAosgRCw5j4YD7Wh23qHBKyh1GV8T1jBlY5/Iz98CAwEA
-AaN2MHQwHQYDVR0OBBYEFLnih3fCc4ygdSimBeBYvU5gw983MB8GA1UdIwQYMBaA
-FLnih3fCc4ygdSimBeBYvU5gw983MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
-BAQDAgKEMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG9w0BAQsFAAOCAQEAazNo
-WaEvH/sbeJuLDR0WL62DDVvU2S11pbvtGu4cnvhpZC+OVALNjpoGUgAiaUl3wvAL
-yik3VQmzQbz6f27AiFQ3F97y3vX82HzMLods6xguEjngBZV7ivn3N4NKk3i2lVz+
-sB4LouPsPhSYOPbBWyHXdoHJE87vNPQIVbYFts7ooXi4CuIaePZOoGIth/8tQOsQ
-FwUEnKw49Fmi4HMbPcmK1LTbVUxm2KnrIqIu14e/9CzoKDH913/dkh8JcWhpqNzK
-T5vpccNYmxJph+VwvAJBv58hRgq9eU8dMbjYxX9Cvl/+e1HHBLCuRKVTzIMjEqoX
-VYJJeQdbYVNq4NS+Ew==
------END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/certs/test-subca.pem Deleted

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDPTCCAiWgAwIBAgIFANQ8y7MwDQYJKoZIhvcNAQELBQAwIjEgMB4GA1UEAwwX
-SU86OlNvY2tldDo6U1NMIERlbW8gQ0EwHhcNMjEwODE2MDgyNjQ5WhcNMzEwODE0
-MDgyNjQ5WjAmMSQwIgYDVQQDDBtJTzo6U29ja2V0OjpTU0wgRGVtbyBTdWIgQ0Ew
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70B5J/FjGev1QXyVZGMZS
-os9IbqVVZP6YcxGGn+JV7DmagX+gsPTlEXnsTgYBfzLeHXZr9SakjIzHZEbqo30e
-hUWGYLrnPZtkMvTdVW7lMb6yipkIhk00C4LrJMDqGFhj3jspM1RPZwnZNmvbHLJ/
-YxjXJS3aBxL6OMbjanes4Y+Ee7v5AghRvkL9u/eiKsN8a2Q66AmGKc7PCS1bRi/Q
-3wAUIoggoeJPcmuLuguQKKPlq80IFNYAFDig1w0MxJVExbqdqw/OH/nSHKdKOO3Y
-ydRFaalOPOPh4Ikt0+/anuspSExIWa16hocH5ceFBIB/7SgRXO0LLTagfSAM20HH
-AgMBAAGjdjB0MB0GA1UdDgQWBBT316uoCjS7Objqa7W81toGgkqvyjAfBgNVHSME
-GDAWgBS54od3wnOMoHUopgXgWL1OYMPfNzAPBgNVHRMBAf8EBTADAQH/MA4GA1Ud
-DwEB/wQEAwIChDARBglghkgBhvhCAQEEBAMCAAcwDQYJKoZIhvcNAQELBQADggEB
-AFkhdJ4RxS2Gadi/bKqB7EA0Cxaqh+14iKmy0MbU35yjabkLpiryGGj9Y3DWPatE
-wy8BF1UTKyEAYr6OXlOmTMI40lBqnrxbo7ulIImQpCR8zqVXZhYVJ/d2qmFh9Rw+
-LUqtK0RTZ1YceXmhrotCIdRpzYnd2o3B6OS02Up4nuV11gO9YHXVNv0mayUpgCeE
-tah9u+YkOP9yvQL/SyMvMBPc+FougRNkNJTMS7aIvagk3PoH8cIp4OjuRIVhK5BE
-sSXbnbvqlflqb5WbKabsVyYrmKFnZQ0lVYI1a4wd29cra7wOt0VbkN3spWT74pBi
-vp3FjmT2DDqdvUDJNHd3haE=
------END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/Changes -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/Changes Changed

@@ -1,3 +1,42 @@
+2.081 2023/01/25
+- new function set_msg_callback for user defined callback on each SSL message
+- showcase function in example/ssl_client.pl and example/ssl_server.pl for
+  computing JA3S/JA3 fingerprints
+- fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)
+2.080 2023/01/18
+- move certs into t/ so that distributions like CentOS don't install the
+  test certificates as part of the documentation any longer.
+2.079 2023/01/16
+- properly extract IPv6 address for verification from PeerAddr if not explicitly
+  given as SSL_verifycn_name.
+  https://github.com/noxxi/p5-io-socket-ssl/issues/123
+2.078 2022/12/11
+- revert decision from 2014 to not verify hostname by default if hostname is
+  IP address but no explicit verification scheme given
+  https://github.com/noxxi/p5-io-socket-ssl/issues/121
+2.077 2022/11/21
+- fix memory leak in session cache, thanks to genuaboro
+  https://github.com/noxxi/p5-io-socket-ssl/pull/118
+- more race conditions in tests fixed thanks to jddurand
+  https://github.com/noxxi/p5-io-socket-ssl/issues/97
+2.076 2022/11/12
+- added curl like tracing based on contribution from jddurand
+  https://github.com/noxxi/p5-io-socket-ssl/pull/117
+- fixed race condition in t/sni_verify.t based on analysis from jddurand
+  https://github.com/noxxi/p5-io-socket-ssl/issues/97
+2.075
+- treat SSL_write returning 0 same as previously -1, as suggested by both
+  OpenSSL and LibreSSL documentation
+- propagate error from SSL_shutdown, but if the shutdown is caused by an outer
+  SSL error keep the original error
+- small tests fixes
+2.074
+- add SSL_ciphersuites option for TLS 1.3 ciphers
+- no longer use own default for ciphers, instead use system default but disable
+  some weak ciphers which might still be enabled on older systems
+2.073
+- fix behavior and tests for openssl 3.0.1
+- fix #110 - prevent internal error warning in some cases
 2.072
 - add PEM_certs2file and PEM_file2certs in IO::Socket::SSL::Utils based
   on idea by rovo89 in #101

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/MANIFEST -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/MANIFEST Changed

@@ -1,24 +1,4 @@
 BUGS
-certs/client-cert.pem
-certs/client-key.enc
-certs/client-key.pem
-certs/create-certs.pl
-certs/proxyca.pem
-certs/server2-cert.pem
-certs/server2-key.pem
-certs/server-cert.der
-certs/server-cert.pem
-certs/server-ecc-cert.pem
-certs/server-ecc-key.pem
-certs/server_enc.p12
-certs/server-key.der
-certs/server-key.enc
-certs/server-key.pem
-certs/server.p12
-certs/server-wildcard.pem
-certs/sub-server.pem
-certs/test-ca.pem
-certs/test-subca.pem
 Changes
 docs/debugging.txt
 example/async_https_server.pl
@@ -42,6 +22,26 @@
 t/auto_verify_hostname.t
 t/cert_formats.t
 t/cert_no_file.t
+t/certs/client-cert.pem
+t/certs/client-key.enc
+t/certs/client-key.pem
+t/certs/create-certs.pl
+t/certs/proxyca.pem
+t/certs/server2-cert.pem
+t/certs/server2-key.pem
+t/certs/server-cert.der
+t/certs/server-cert.pem
+t/certs/server-ecc-cert.pem
+t/certs/server-ecc-key.pem
+t/certs/server_enc.p12
+t/certs/server-key.der
+t/certs/server-key.enc
+t/certs/server-key.pem
+t/certs/server.p12
+t/certs/server-wildcard.pem
+t/certs/sub-server.pem
+t/certs/test-ca.pem
+t/certs/test-subca.pem
 t/compatibility.t
 t/connectSSL-timeout.t
 t/core.t

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/META.json -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/META.json Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/META.yml -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/META.yml Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/example/ssl_client.pl -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/example/ssl_client.pl Changed

@@ -5,6 +5,7 @@
 use warnings;
 use IO::Socket::SSL;
 use Getopt::Long qw(:config posix_default bundling);
+use Digest::MD5 'md5_hex';
 
 my ($cert_file,$key_file,$key_pass,$ca,$name,$no_verify);
 GetOptions(
@@ -49,9 +50,48 @@
 	SSL_cert_file => $cert_file,
 	SSL_key_file  => $key_file,
 	defined($key_pass) ? ( SSL_passwd_cb => sub { $key_pass } ):(),
-    ):()
+    ):(),
+    SSL_startHandshake => 0,
 ) or die "failed to connect to $addr: $!,$SSL_ERROR";
 
+my $ja3s;
+$cl->set_msg_callback(\&msgcb, \$ja3s);
+$cl->connect_SSL() or die "failed SSL handshake: $SSL_ERROR";
+
 warn "new SSL connection with cipher=".$cl->get_cipher." version=".$cl->get_sslversion." certificate:\n".
     "\tsubject=".$cl->peer_certificate('subject')."\n".
-    "\tissuer=".$cl->peer_certificate('issuer')."\n"
+    "\tissuer=".$cl->peer_certificate('issuer')."\n".
+    "\tja3s=".md5_hex($ja3s)." $ja3s\n";
+
+
+sub msgcb {
+    my ($self, $direction, $ssl_ver, $content_type, $buf, $len, $ssl, $ja3s_r) = @_;
+    $content_type == 22 or return;  # TLS handshake
+    #  1 byte: msg type
+    #  3 byte: length
+    (my $msg_type, $buf) = unpack('c x3 a*', $buf);
+    if ($msg_type == 2) {  # Server Hello
+	$self->set_msg_callback(undef);  # no need to look further
+
+	#  2 byte: protocol version
+	# 32 byte: random
+	# 1/...  : session id
+	#  2 byte: cipher suite
+	#  1 byte: compression method
+	# 2/...  : extensions
+	my ($ver, $cipher, $ext) = unpack("n x32 c/x n x n/a", $buf);
+
+	my @ext;
+	while (length($ext)>2) {
+	    # 2 byte: extension type
+	    # 2|... : extension data
+	    (my $ext_type, $ext) = unpack("n n/x a*", $ext);
+	    push @ext, $ext_type;
+	}
+	$$ja3s_r = join(",",
+	    $ver,
+	    $cipher,
+	    join("-", @ext)
+	);
+    }
+}

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/example/ssl_server.pl -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/example/ssl_server.pl Changed

@@ -5,8 +5,9 @@
 use warnings;
 use IO::Socket::SSL;
 use Getopt::Long qw(:config posix_default bundling);
+use Digest::MD5 'md5_hex';
 
-my ($cert_file,$key_file,$key_pass,$ca);
+my ($cert_file,$key_file,$key_pass,$ca,$http);
 GetOptions(
     'd|debug:i' => \$IO::Socket::SSL::DEBUG,
     'h|help'    => sub { usage() },
@@ -14,6 +15,7 @@
     'K|key=s'   => \$key_file,
     'P|pass=s'  => \$key_pass,
     'ca=s'      => \$ca,
+    'http'      => \$http,
 ) or usage("bad option");
 
 sub usage {
@@ -29,6 +31,7 @@
   -P|--pass  passphrase   passphrase for private key, default none
   --ca dir|file           request a client certificate and use given dir/file as 
                           trusted CA store to verify it
+  --http                  work as tiny HTTP server
 USAGE
     exit(2);
 }
@@ -38,11 +41,10 @@
 $cert_file or usage("no certificate given");
 $key_file ||= $cert_file;
 
-my $ioclass = IO::Socket::SSL->can_ipv6 || 'IO::Socket::INET';
-my $server = $ioclass->new(
+my $server = IO::Socket::IP->new(
     Listen => 5,
     LocalAddr => $addr,
-    Reuse => 1,
+    ReuseAddr => 1,
 ) or die "failed to create SSL server at $addr: $!";
 
 my $ctx = IO::Socket::SSL::SSL_Context->new(
@@ -63,18 +65,98 @@
 	next;
     };
 
-    IO::Socket::SSL->start_SSL($cl, SSL_server => 1, SSL_reuse_ctx => $ctx) or do {
+    IO::Socket::SSL->start_SSL($cl,
+	SSL_server => 1,
+	SSL_reuse_ctx => $ctx,
+	SSL_startHandshake => 0
+    ) or do {
 	warn "ssl handshake failed: $SSL_ERROR\n";
 	next;
     };
 
+    my $ja3;
+    $cl->set_msg_callback(\&msgcb, \$ja3);
+    $cl->accept_SSL() or do {
+	warn "failed SSL handshake: $SSL_ERROR\n";
+	next;
+    };
+
+    my $info = "cipher=".$cl->get_cipher
+	. " version=".$cl->get_sslversion
+	. " ja3=".md5_hex($ja3)." $ja3";
+
     if ( $cl->peer_certificate ) {
 	warn "new SSL connection with client certificate\n".
 	    "\tsubject=".$cl->peer_certificate('subject')."\n".
-	    "\tissuer=".$cl->peer_certificate('issuer')."\n"
+	    "\tissuer=".$cl->peer_certificate('issuer')."\n".
+	    $info."\n";
     } else {
-	warn "new SSL connection without client certificate\n"
+	warn "new SSL connection without client certificate\n".
+	    $info."\n";
     }
 
-    print $cl "connected with cipher=".$cl->get_cipher." version=".$cl->get_sslversion."\n";
+    if ($http) {
+	sysread($cl, my $buf, 8192);
+	$buf =~s{\n\r?\n.*}{\n}s;
+	$info =~s{\b\w+=}{\n$&}mg;
+	$info .= "\n\n-------\n\n$buf";
+	print $cl "HTTP/1.0 200 ok\r\n".
+	    "Content-type: text/plain\r\n".
+	    "Content-length: ".length($info)."\r\n".
+	    "\r\n".
+	    $info;
+    } else {
+	print $cl "connect with $info\n";
+    }
+}
+
+
+sub msgcb {
+    my ($self, $direction, $ssl_ver, $content_type, $buf, $len, $ssl, $ja3_r) = @_;
+    $content_type == 22 or return;  # TLS handshake
+    #  1 byte: msg type
+    #  3 byte: length
+    (my $msg_type, $buf) = unpack('c x3 a*', $buf);
+    if ($msg_type == 1)  {      # Client Hello
+	$self->set_msg_callback(undef);  # no need to look further
+
+	my %grease = map { $_ =>1 } (
+	    0x0a0a, 0x1a1a, 0x2a2a, 0x3a3a, 0x4a4a, 0x5a5a, 0x6a6a, 0x7a7a,
+	    0x8a8a, 0x9a9a, 0xaaaa, 0xbaba, 0xcaca, 0xdada, 0xeaea, 0xfafa,
+	);
+
+	#  2 byte: protocol version
+	# 32 byte: random
+	# 1/..   : session id
+	# 2/...  : cipher suites
+	# 1/...  : compression methods
+	# 2/...  : extensions
+	my ($ver, $ciphers, $ext) = unpack("n x32 c/x n/a c/x n/a", $buf);
+
+	my @ciphers = grep { !$grease{$_} } unpack("n*", $ciphers);
+
+	my (@ext, @elliptic_curve, @elliptic_curve_point_format);
+	while (length($ext)>2) {
+	    # 2 byte: extension value
+	    # 2|... : extension data
+	    (my $ext_val, my $ext_data, $ext) = unpack("n n/a a*", $ext);
+	    next if $grease{$ext_val};
+	    push @ext, $ext_val;
+	    if ($ext_val == 0x0a) {
+		# Elliptic curve points
+		@elliptic_curve = unpack("x2 n*", $ext_data);
+	    } elsif ($ext_val == 0x0b) {
+		# Elliptic curve point formats
+		@elliptic_curve_point_format = unpack("x c*", $ext_data);
+	    }
+	}
+
+	$$ja3_r = join(",",
+	    $ver,
+	    join("-", @ciphers),
+	    join("-", @ext),
+	    join("-", @elliptic_curve),
+	    join("-", @elliptic_curve_point_format),
+	);
+    }
 }

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/lib/IO/Socket/SSL.pm -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/lib/IO/Socket/SSL.pm Changed

@@ -13,7 +13,7 @@
 
 package IO::Socket::SSL;
 
-our $VERSION = '2.072';
+our $VERSION = '2.081';
 
 use IO::Socket;
 use Net::SSLeay 1.46;
@@ -39,6 +39,7 @@
 my $Net_SSLeay_ERROR_WANT_READ   = Net::SSLeay::ERROR_WANT_READ();
 my $Net_SSLeay_ERROR_WANT_WRITE  = Net::SSLeay::ERROR_WANT_WRITE();
 my $Net_SSLeay_ERROR_SYSCALL     = Net::SSLeay::ERROR_SYSCALL();
+my $Net_SSLeay_ERROR_SSL         = Net::SSLeay::ERROR_SSL();
 my $Net_SSLeay_VERIFY_NONE       = Net::SSLeay::VERIFY_NONE();
 my $Net_SSLeay_VERIFY_PEER       = Net::SSLeay::VERIFY_PEER();
 
@@ -75,6 +76,7 @@
 my $check_partial_chain; # use X509_V_FLAG_PARTIAL_CHAIN if available
 my $auto_retry;      # (clear|set)_mode SSL_MODE_AUTO_RETRY with OpenSSL 1.1.1+ with non-blocking
 my $ssl_mode_release_buffers = 0; # SSL_MODE_RELEASE_BUFFERS if available
+my $can_ciphersuites; # support for SSL_CTX_set_ciphersuites (TLS 1.3)
 
 my $openssl_version;
 my $netssleay_version;
@@ -112,6 +114,7 @@
     $can_tckt_keycb  = defined &Net::SSLeay::CTX_set_tlsext_ticket_getkey_cb
 	&& $netssleay_version >= 1.80;
     $can_pha = defined &Net::SSLeay::CTX_set_post_handshake_auth;
+    $can_ciphersuites = defined &Net::SSLeay::CTX_set_ciphersuites;
 
     if (defined &Net::SSLeay::SESSION_up_ref) {
 	$session_upref = 1;
@@ -190,7 +193,6 @@
     };
 }
 
-
 # global defaults
 my %DEFAULT_SSL_ARGS = (
     SSL_check_crl => 0,
@@ -202,11 +204,8 @@
     SSL_npn_protocols => undef,    # meaning depends whether on server or client side
     SSL_alpn_protocols => undef,   # list of protocols we'll accept/send, for example 'http/1.1','spdy/3.1'
 
-    # https://wiki.mozilla.org/Security/Server_Side_TLS, 2019/03/05
-    # "Old backward compatibility" for best compatibility
-    # .. "Most ciphers that are not clearly broken and dangerous to use are supported"
-    # slightly reordered to prefer AES since it is cheaper when hardware accelerated
-    SSL_cipher_list => 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:SEED:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!RSAPSK:!aDH:!aECDH:!EDH-DSS-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA:!SRP',
+    # rely on system default but be sure to disable some definitely bad ones
+    SSL_cipher_list => 'DEFAULT !EXP !MEDIUM !LOW !eNULL !aNULL !RC4 !DES !MD5 !PSK !SRP',
 );
 
 my %DEFAULT_SSL_CLIENT_ARGS = (
@@ -215,64 +214,6 @@
 
     SSL_ca_file => undef,
     SSL_ca_path => undef,
-
-    # older versions of F5 BIG-IP hang when getting SSL client hello >255 bytes
-    # http://support.f5.com/kb/en-us/solutions/public/13000/000/sol13037.html
-    # http://guest:guest@rt.openssl.org/Ticket/Display.html?id=2771
-    # Ubuntu worked around this by disabling TLSv1_2 on the client side for
-    # a while. Later a padding extension was added to OpenSSL to work around
-    # broken F5 but then IronPort croaked because it did not understand this
-    # extension so it was disabled again :(
-    # Firefox, Chrome and IE11 use TLSv1_2 but use only a few ciphers, so
-    # that packet stays small enough. We try the same here.
-
-    SSL_cipher_list => join(" ",
-
-	# SSLabs report for Chrome 48/OSX.
-	# This also includes the fewer ciphers Firefox uses.
-	'ECDHE-ECDSA-AES128-GCM-SHA256',
-	'ECDHE-RSA-AES128-GCM-SHA256',
-	'DHE-RSA-AES128-GCM-SHA256',
-	'ECDHE-ECDSA-CHACHA20-POLY1305',
-	'ECDHE-RSA-CHACHA20-POLY1305',
-	'ECDHE-ECDSA-AES256-SHA',
-	'ECDHE-RSA-AES256-SHA',
-	'DHE-RSA-AES256-SHA',
-	'ECDHE-ECDSA-AES128-SHA',
-	'ECDHE-RSA-AES128-SHA',
-	'DHE-RSA-AES128-SHA',
-	'AES128-GCM-SHA256',
-	'AES256-SHA',
-	'AES128-SHA',
-	'DES-CBC3-SHA',
-
-	# IE11/Edge has some more ciphers, notably SHA384 and DSS
-	# we don't offer the *-AES128-SHA256 and *-AES256-SHA384 non-GCM
-	# ciphers IE/Edge offers because they look like a large mismatch
-	# between a very strong HMAC and a comparably weak (but sufficient)
-	# encryption. Similar all browsers which do SHA384 can do ECDHE
-	# so skip the DHE*SHA384 ciphers.
-	'ECDHE-RSA-AES256-GCM-SHA384',
-	'ECDHE-ECDSA-AES256-GCM-SHA384',
-	# 'ECDHE-RSA-AES256-SHA384',
-	# 'ECDHE-ECDSA-AES256-SHA384',
-	# 'ECDHE-RSA-AES128-SHA256',
-	# 'ECDHE-ECDSA-AES128-SHA256',
-	# 'DHE-RSA-AES256-GCM-SHA384',
-	# 'AES256-GCM-SHA384',
-	'AES256-SHA256',
-	# 'AES128-SHA256',
-	'DHE-DSS-AES256-SHA256',
-	# 'DHE-DSS-AES128-SHA256',
-	'DHE-DSS-AES256-SHA',
-	'DHE-DSS-AES128-SHA',
-	'EDH-DSS-DES-CBC3-SHA',
-
-	# Just to make sure, that we don't accidentally add bad ciphers above.
-	# This includes dropping RC4 which is no longer supported by modern
-	# browsers and also excluded in the SSL libraries of Python and Ruby.
-	"!EXP !MEDIUM !LOW !eNULL !aNULL !RC4 !DES !MD5 !PSK !SRP"
-    )
 );
 
 # set values inside _init to work with perlcc, RT#95452
@@ -660,6 +601,7 @@
     _SSL_opened
     _SSL_opening
     _SSL_servername
+    _SSL_msg_callback
 );
 
 
@@ -811,6 +753,8 @@
 	Net::SSLeay::set_fd($ssl, $fileno)
 	    || return $self->error("SSL filehandle association failed");
 
+	set_msg_callback($self) if $DEBUG>=2 || ${*$self}{_SSL_msg_callback};
+
 	if ( $can_client_sni ) {
 	    my $host;
 	    if ( exists $arg_hash->{SSL_hostname} ) {
@@ -845,7 +789,13 @@
 		|| $arg_hash->{SSL_hostname};
 	    if ( ! defined $host ) {
 		if ( $host = $arg_hash->{PeerAddr} || $arg_hash->{PeerHost} ) {
-		    $host =~s{:a-zA-Z0-9_\-+$}{};
+		    $host =~s{^
+			(?:
+			    (^:\+) |    # ipv4|host
+			    ($.*)$     # ipv6|host
+			)
+			(:\w\-+)?        # optional :port
+		    $}{$1$2}x;             # ipv4|host|ipv6
 		}
 	    }
 	    ${$ctx->{verify_name_ref}} = $host;
@@ -1081,6 +1031,8 @@
 
 	Net::SSLeay::set_fd($ssl, $fileno)
 	    || return $socket->error("SSL filehandle association failed");
+
+	set_msg_callback($self) if $DEBUG>=2 || ${*$self}{_SSL_msg_callback};
     }
 
     $ssl ||= ${*$socket}{'_SSL_object'};
@@ -1169,12 +1121,48 @@
 }
 
 
+# support user defined message callback but also internal debugging
+sub _msg_callback {
+    ##  my ($direction, $ssl_ver, $content_type, $buf, $len, $ssl, $userp) = @_;
+    IO::Socket::SSL::Trace::ossl_trace(@_) if $DEBUG>=2;
+    my $self = ($SSL_OBJECT{$_5} || return)->0 || return;
+    if (my $cb = ${*$self}{_SSL_msg_callback}) {
+	my ($sub,@arg) = @$cb;
+	$sub->($self, @_0..5, @arg);
+    }
+}
+
+my $ssleay_set_msg_callback = defined &Net::SSLeay::set_msg_callback
+    && \&Net::SSLeay::set_msg_callback;
+
+sub set_msg_callback {
+    my $self = shift;
+    if (@_) {
+	if ($_0) {
+	    # enable user defined callback: ($cb,@arg)
+	    die "no support for msg callback with this version of Net::SSLeay/OpenSSL"
+		if !$ssleay_set_msg_callback;
+	    ${*$self}{_SSL_msg_callback} = @_;
+	} else {
+	    # disable user defined callback
+	    delete ${*$self}{_SSL_msg_callback};
+	}
+    }
+
+    # activate user set callback and/or internal for debugging
+    if ($ssleay_set_msg_callback and my $ssl = ${*$self}{_SSL_object}) {
+	$ssleay_set_msg_callback->($ssl,
+	    ($DEBUG>=2 || ${*$self}{_SSL_msg_callback})? \&_msg_callback : undef)
+    }
+}
+

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/lib/IO/Socket/SSL.pod -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/lib/IO/Socket/SSL.pod Changed

@@ -545,8 +545,8 @@
 
 =item *
 
-2 - Print also information about call flow from L<IO::Socket::SSL> and progress
-information from L<Net::SSLeay>.
+2 - Print also information about call flow from L<IO::Socket::SSL>, progress
+information from L<Net::SSLeay> and state information from OpenSSL.
 
 =item *
 
@@ -1064,17 +1064,31 @@
 =item SSL_cipher_list
 
 If this option is set the cipher list for the connection will be set to the
-given value, e.g. something like 'ALL:!LOW:!EXP:!aNULL'. Look into the OpenSSL
-documentation (L<https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html#CIPHER-STRINGS>)
+given value, e.g. something like 'ALL:!LOW:!EXP:!aNULL'. This will only affect
+ciphers for TLS 1.2 and lower. See the OpenSSL documentation
+(L<https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html#CIPHER-STRINGS>)
 for more details.
 
 Unless you fail to contact your peer because of no shared ciphers it is
-recommended to leave this option at the default setting. The default setting
-prefers ciphers with forward secrecy, disables anonymous authentication and
-disables known insecure ciphers like MD5, DES etc. This gives a grade A result
-at the tests of SSL Labs.
-To use the less secure OpenSSL builtin default (whatever this is) set
-SSL_cipher_list to ''.
+recommended to leave this option at the default setting, which uses the system
+default but disables some insecure ciphers which might still be enabled on older
+systems.
+
+In case different cipher lists are needed for different SNI hosts a hash can be
+given with the host as key and the cipher suite as value, similar to
+B<SSL_cert*>.
+
+=item SSL_ciphersuites
+
+If this option is set the TLS 1.3 ciphersuites for the connection will be
+set to the given value. This is similar to SSL_cipher_list, but only for TLS 1.3
+ciphers. See argument C<-ciphersuits> in the OpenSSL documentation
+(L<https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html>) for
+details.
+
+Unless you fail to contact your peer because of no shared ciphers it is
+recommended to leave this option at the default setting, which uses the system
+default.
 
 In case different cipher lists are needed for different SNI hosts a hash can be
 given with the host as key and the cipher suite as value, similar to
@@ -1887,6 +1901,34 @@
 retry the call after the socket got readable (SSL_WANT_READ) or writeable
 (SSL_WANT_WRITE).
 
+=item B<set_msg_callback>
+
+This will add/remove a user defined callback for each message, internally using
+openssl SSL_set_msg_callback API. To make sure that the callback is active
+before the handshake starts, combine it with C<< SSL_startHandshake => 0 >> in
+the preceding setup of the SSL object. To remove callback explicitly call it
+with an empty callback function.
+
+Example:
+
+    $sock = IO::Socket::SSL->new( .... , SSL_startHandshake => 0);
+    # set callback
+    $sock->set_msg_callback(\&cb, $cbarg1, $cbarg2);
+    $sock->connect_SSL();
+
+    sub cb {
+	my ($sock,
+	    # see SSL_set_msg_callback for the following args
+	    $direction, $ssl_ver, $content_type, $buf, $len, $ssl,
+	    $cbarg1, $cbarg2)
+	    = @_;
+	...
+	if (no_longer_need_cb) {
+	    # disable callback
+	    $sock->set_msg_callback(undef);
+	}
+    }
+
 =item B<ocsp_resolver>
 
 This will create an OCSP resolver object, which can be used to create OCSP

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/lib/IO/Socket/SSL/PublicSuffix.pm -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/lib/IO/Socket/SSL/PublicSuffix.pm Changed

@@ -357,7 +357,7 @@
 
 // ===BEGIN ICANN DOMAINS===
 
-// ac : https://en.wikipedia.org/wiki/.ac
+// ac : http://nic.ac/rules.htm
 ac
 com.ac
 edu.ac
@@ -370,8 +370,7 @@
 ad
 nom.ad
 
-// ae : https://en.wikipedia.org/wiki/.ae
-// see also: "Domain Name Eligibility Policy" at http://www.aeda.ae/eng/aepolicy.php
+// ae : https://tdra.gov.ae/en/aeda/ae-policies
 ae
 co.ae
 net.ae
@@ -523,17 +522,21 @@
 // aq : https://en.wikipedia.org/wiki/.aq
 aq
 
-// ar : https://nic.ar/nic-argentina/normativa-vigente
+// ar : https://nic.ar/es/nic-argentina/normativa
 ar
+bet.ar
 com.ar
+coop.ar
 edu.ar
 gob.ar
 gov.ar
 int.ar
 mil.ar
 musica.ar
+mutual.ar
 net.ar
 org.ar
+senasa.ar
 tur.ar
 
 // arpa : https://en.wikipedia.org/wiki/.arpa
@@ -1186,7 +1189,13 @@
 inf.cu
 
 // cv : https://en.wikipedia.org/wiki/.cv
+// cv : http://www.dns.cv/tldcv_portal/do?com=DS;5446457100;111;+PAGE(4000018)+K-CAT-CODIGO(RDOM)+RCNT(100); <- registration rules
 cv
+com.cv
+edu.cv
+int.cv
+nome.cv
+org.cv
 
 // cw : http://www.una.cw/cw_registry/
 // Confirmed by registry <registry@una.net> 2013-03-26
@@ -1203,6 +1212,7 @@
 
 // cy : http://www.nic.cy/
 // Submitted by registry Panayiotou Fotia <cydns@ucy.ac.cy>
+// namespace policies URL https://www.nic.cy/portal//sites/default/files/symfonia_gia_eggrafi.pdf
 cy
 ac.cy
 biz.cy
@@ -1210,10 +1220,9 @@
 ekloges.cy
 gov.cy
 ltd.cy
-name.cy
+mil.cy
 net.cy
 org.cy
-parliament.cy
 press.cy
 pro.cy
 tm.cy
@@ -1523,6 +1532,7 @@
 web.gu
 
 // gw : https://en.wikipedia.org/wiki/.gw
+// gw : https://nic.gw/regras/
 gw
 
 // gy : https://en.wikipedia.org/wiki/.gy
@@ -1653,7 +1663,9 @@
 ie
 gov.ie
 
-// il : http://www.isoc.org.il/domains/
+// il :         http://www.isoc.org.il/domains/
+// see also:    https://en.isoc.org.il/il-cctld/registration-rules
+// ISOC-IL      (operated by .il Registry)
 il
 ac.il
 co.il
@@ -1663,6 +1675,16 @@
 muni.il
 net.il
 org.il
+// xn--4dbrk0ce ("Israel", Hebrew) : IL
+xn--4dbrk0ce
+// xn--4dbgdty6c.xn--4dbrk0ce.
+xn--4dbgdty6c.xn--4dbrk0ce
+// xn--5dbhl8d.xn--4dbrk0ce.
+xn--5dbhl8d.xn--4dbrk0ce
+// xn--8dbq2a.xn--4dbrk0ce.
+xn--8dbq2a.xn--4dbrk0ce
+// xn--hebda8b.xn--4dbrk0ce.
+xn--hebda8b.xn--4dbrk0ce
 
 // im : https://www.nic.im/
 // Submitted by registry <info@nic.im>
@@ -1678,22 +1700,51 @@
 tv.im
 
 // in : https://en.wikipedia.org/wiki/.in
-// see also: https://registry.in/Policies
+// see also: https://registry.in/policies
 // Please note, that nic.in is not an official eTLD, but used by most
 // government institutions.
 in
+5g.in
+6g.in
+ac.in
+ai.in
+am.in
+bihar.in
+biz.in
+business.in
+ca.in
+cn.in
 co.in
+com.in
+coop.in
+cs.in
+delhi.in
+dr.in
+edu.in
+er.in
 firm.in
-net.in
-org.in
 gen.in
+gov.in
+gujarat.in
 ind.in
+info.in
+int.in
+internet.in
+io.in
+me.in
+mil.in
+net.in
 nic.in
-ac.in
-edu.in
+org.in
+pg.in
+post.in
+pro.in
 res.in
-gov.in
-mil.in
+travel.in
+tv.in
+uk.in
+up.in
+us.in
 
 // info : https://en.wikipedia.org/wiki/.info
 info
@@ -1703,7 +1754,7 @@
 int
 eu.int
 
-// io : http://www.nic.io/rules.html
+// io : http://www.nic.io/rules.htm
 // list of other 2nd level tlds ?
 io
 com.io
@@ -4102,11 +4153,10 @@
 // ky : http://www.icta.ky/da_ky_reg_dom.php
 // Confirmed by registry <kysupport@perimeterusa.com> 2008-06-17
 ky
-edu.ky
-gov.ky
 com.ky
-org.ky
+edu.ky
 net.ky
+org.ky
 
 // kz : https://en.wikipedia.org/wiki/.kz
 // see also: http://www.nic.kz/rules/index.jsp
@@ -6197,7 +6247,7 @@
 org.ps
 net.ps
 
-// pt : http://online.dns.pt/dns/start_dns
+// pt : https://www.dns.pt/en/domain/pt-terms-and-conditions-registration-rules/

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/lib/IO/Socket/SSL/Utils.pm -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/lib/IO/Socket/SSL/Utils.pm Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/acceptSSL-timeout.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/acceptSSL-timeout.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/alpn.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/alpn.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/auto_verify_hostname.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/auto_verify_hostname.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/cert_formats.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/cert_formats.t Changed

@@ -15,7 +15,7 @@
 my ($fh,$pemfile) = tempfile();
 my $master = $$;
 END { unlink($pemfile) if $$ == $master };
-for ('certs/server-cert.pem','certs/server-key.pem') {
+for ('t/certs/server-cert.pem','t/certs/server-key.pem') {
     open( my $pf,'<',$_ ) or die "open $_: $!";
     print $fh do { local $/; <$pf> };
 }
@@ -23,26 +23,26 @@
 
 my @tests = (
     'PEM' => {
-	SSL_cert_file => 'certs/server-cert.pem',
-	SSL_key_file => 'certs/server-key.pem',
+	SSL_cert_file => 't/certs/server-cert.pem',
+	SSL_key_file => 't/certs/server-key.pem',
     },
     'PEM_one_file' => {
 	SSL_cert_file => $pemfile,
     },
     'PEM_keyenc' => {
-	SSL_cert_file => 'certs/server-cert.pem',
-	SSL_key_file => 'certs/server-key.enc',
+	SSL_cert_file => 't/certs/server-cert.pem',
+	SSL_key_file => 't/certs/server-key.enc',
 	SSL_passwd_cb => sub { "bluebell" },
     },
     'DER' => {
-	SSL_cert_file => 'certs/server-cert.der',
-	SSL_key_file => 'certs/server-key.der',
+	SSL_cert_file => 't/certs/server-cert.der',
+	SSL_key_file => 't/certs/server-key.der',
     },
     'PKCS12' => {
-	SSL_cert_file => 'certs/server.p12',
+	SSL_cert_file => 't/certs/server.p12',
     },
     'PKCS12_enc' => {
-	SSL_cert_file => 'certs/server_enc.p12',
+	SSL_cert_file => 't/certs/server_enc.p12',
 	SSL_passwd_cb => sub { "bluebell" },
     },
 );

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/cert_no_file.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/cert_no_file.t Changed

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/client-cert.pem Added

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/client-key.enc Added

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpQIBAAKCAQEAtIveNOEdtlQb9WRxjTeUzXgh8TJgMShz85KKH/wjBVM0q5sM
+72D9JNRMoG0Sm6wONHjl+++RuCafw1On0bNGgGpjztHk/mNdH161JBPv8QBcFt+r
+zxZMLqa5Grc8qqgDq/Rh50qxZc4DOLldFmyTQth+kqL0mADpN9AvE4jCMqUnQuVZ
+ImVFgv53pIqBAfdIZqlPgJ9m+ctaEhyPbsDtEvky3IpVpBQplClz8RFDo5f1oO3w
+dlti+qR6XLs7aqWZbknfnGepvNtD1MW0Cgd2A+Wa2U/kTY2/nKVU5agcp5FqvNz8
+XD1PL05PDREgjQbpOwokf5N6q4QlP9zcYg/4QQIDAQABAoIBABXes/jalI1toJHf
+/AfHxe8COHVVvXRy8qG8fF4NviXC25hWcLGOAXgMvef4cma4R6O4Sd6T2WZRymxA
+Fc3nbhi32nV29CrS+TinsaBISHo8aYtNRovwJuQHRtibPd5ruf8iPBpG8Fh1RSth
+u8qPtiJkpGdplSCVCqsbvRocCK8W4WSya/NCq/sq7j4Th0OTPJV/2oUDnn7SYTJV
+f8fg7X+NIcymeNDkiOz2jwyEtH26sKQpECdLDR6Huk9crVes/2bhbuTocIarCb8r
+BGImlZ7l0brfpwor7gXrY5DPPVMSYW+UEz3c63qSp97bVnja5CLiZStCol1Q9/6M
+nhY5zJkCgYEA5r+n17K4+zHNP5uuywbqrxa2jxhpOeFYrYqFtr2F+phhUM/G5taV
+whcgwrvqc08mmcL8FnG6uDbx3wWkFjHTwFQLbLgn1lytRINMPSMfXmXJ84MB2mtM
+5nu40+BMd3TYapJexnd2QVb6ToldA6/QN28/1/0lYYdCAy4fIbyopJkCgYEAyE3P
+8cGPtAiIncNIp+GU8Z07LLK2+uJZUZ8SNY6BU7rKJThbb6EfQ6AWXmbhibr2qmwk
+H45guzlflT0PIiWmVvvx3ETlZu6qsVVX/XDWfAdNDGwm9zK1IEFOnf8zc+G/Miip
+oR9OLxBqAz89WeHPLTbOZYdJHlbOtrJtImlEEekCgYEAnGtLUfK7Zrypz/avFL4J
+lMsm0fXQTwYtYObIIcpz6h4lyewvfwfz2PBoqtlL4wLCvfTpgiVyV7IXYAGo68q3
+KmdOn1Ju3udQJWOD6OXIO+twbPxf4zpdlNhFwIsKCuhQVF4IlS0iIsTdRSPkw70I
+vqtRcg8OqgBQhWtcezgycfECgYEAxPzheFxnuyJ5WM3o8lHDbSq4O2k20t0wAjly
+awFO5s1YZ+pY4huO567U0NpVDGK2mzvm+rHHJ9lwyxBVhbuJLxpv7bRD90rYy7Wm
+5zTFewyjFYh3ebyArMwNSQzlyR1GL0oWKMLk3RxDZhYXfAG7AjhYGzlFC3VLrhkj
+gygLLaECgYEAvMxiWTZ+1knOAt2ajtlEEKuEh5Ez0NVcclhkcZGbE/SFo6Zw0U+B
+WV8rZ74SyFcRNznk/zd/Kcvbe7sH7w823Te/UI5QiU3IUmlYFUEGHxChaIxGm/1n
+mQlvAjaIK3TPGVpY/BGptJEWTrFlH9HH11tHAiEkFFZhzkYQLjg9cZM=
+-----END RSA PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/client-key.pem Added

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQC0i9404R22VBv1
+ZHGNN5TNeCHxMmAxKHPzkoof/CMFUzSrmwzvYP0k1EygbRKbrA40eOX775G4Jp/D
+U6fRs0aAamPO0eT+Y10fXrUkE+/xAFwW36vPFkwuprkatzyqqAOr9GHnSrFlzgM4
+uV0WbJNC2H6SovSYAOk30C8TiMIypSdC5VkiZUWC/nekioEB90hmqU+An2b5y1oS
+HI9uwO0S+TLcilWkFCmUKXPxEUOjl/Wg7fB2W2L6pHpcuztqpZluSd+cZ6m820PU
+xbQKB3YD5ZrZT+RNjb+cpVTlqBynkWq83PxcPU8vTk8NESCNBuk7CiR/k3qrhCU/
+3NxiD/hBAgMBAAECggEAFd6z+NqUjW2gkd/8B8fF7wI4dVW9dHLyobx8Xg2+JcLb
+mFZwsY4BeAy95/hyZrhHo7hJ3pPZZlHKbEAVzeduGLfadXb0KtL5OKexoEhIejxp
+i01Gi/Am5AdG2Js93mu5/yI8GkbwWHVFK2G7yo+2ImSkZ2mVIJUKqxu9GhwIrxbh
+ZLJr80Kr+yruPhOHQ5M8lX/ahQOeftJhMlV/x+Dtf40hzKZ40OSI7PaPDIS0fbqw
+pCkQJ0sNHoe6T1ytV6z/ZuFu5OhwhqsJvysEYiaVnuXRut+nCivuBetjkM89UxJh
+b5QTPdzrepKn3ttWeNrkIuJlK0KiXVD3/oyeFjnMmQKBgQDmv6fXsrj7Mc0/m67L
+BuqvFraPGGk54VitioW2vYX6mGFQz8bm1pXCFyDCu+pzTyaZwvwWcbq4NvHfBaQW
+MdPAVAtsuCfWXK1Eg0w9Ix9eZcnzgwHaa0zme7jT4Ex3dNhqkl7Gd3ZBVvpOiV0D
+r9A3bz/X/SVhh0IDLh8hvKikmQKBgQDITc/xwY+0CIidw0in4ZTxnTsssrb64llR
+nxI1joFTusolOFtvoR9DoBZeZuGJuvaqbCQfjmC7OV+VPQ8iJaZW+/HcROVm7qqx
+VVf9cNZ8B00MbCb3MrUgQU6d/zNz4b8yKKmhH04vEGoDPz1Z4c8tNs5lh0keVs62
+sm0iaUQR6QKBgQCca0tR8rtmvKnP9q8UvgmUyybR9dBPBi1g5sghynPqHiXJ7C9/
+B/PY8Giq2UvjAsK99OmCJXJXshdgAajryrcqZ06fUm7e51AlY4Po5cg763Bs/F/j
+Ol2U2EXAiwoK6FBUXgiVLSIixN1FI+TDvQi+q1FyDw6qAFCFa1x7ODJx8QKBgQDE
+/OF4XGe7InlYzejyUcNtKrg7aTbS3TACOXJrAU7mzVhn6ljiG47nrtTQ2lUMYrab
+O+b6sccn2XDLEFWFu4kvGm/ttEP3StjLtabnNMV7DKMViHd5vICszA1JDOXJHUYv
+ShYowuTdHENmFhd8AbsCOFgbOUULdUuuGSODKAstoQKBgQC8zGJZNn7WSc4C3ZqO
+2UQQq4SHkTPQ1VxyWGRxkZsT9IWjpnDRT4FZXytnvhLIVxE3OeT/N38py9t7uwfv
+DzbdN79QjlCJTchSaVgVQQYfEKFojEab/WeZCW8CNogrdM8ZWlj8Eam0kRZOsWUf
+0cfXW0cCISQUVmHORhAuOD1xkw==
+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/create-certs.pl Added

@@ -0,0 +1,133 @@
+use strict;
+use warnings;
+use IO::Socket::SSL::Utils;
+use Net::SSLeay;
+
+my $dir = "./";
+my $now = time();
+my $later = $now + 10*365*86400;
+
+Net::SSLeay::SSLeay_add_ssl_algorithms();
+my $sha256 = Net::SSLeay::EVP_get_digestbyname('sha256') or die;
+my $printfp = sub {
+    my ($w,$cert) = @_;
+    print $w.' sha256$'.unpack('H*',Net::SSLeay::X509_digest($cert, $sha256))."\n"
+};
+
+my %time_valid = (not_before => $now, not_after => $later);
+
+my @ca = CERT_create(
+    CA => 1,
+    subject => { CN => 'IO::Socket::SSL Demo CA' },
+    %time_valid,
+);
+save('test-ca.pem',PEM_cert2string($ca0));
+
+my @server = CERT_create(
+    CA => 0,
+    subject => { CN => 'server.local' },
+    subjectAltNames =>   DNS => 'server.local' ,  IP => '127.0.0.1'  ,
+    purpose => 'server',
+    issuer => \@ca,
+    %time_valid,
+);
+save('server-cert.pem',PEM_cert2string($server0));
+save('server-key.pem',PEM_key2string($server1));
+$printfp->(server => $server0);
+
+@server = CERT_create(
+    CA => 0,
+    subject => { CN => 'server2.local' },
+    subjectAltNames =>   DNS => 'server2.local' ,  IP => '127.0.0.1'  ,
+    purpose => 'server',
+    issuer => \@ca,
+    %time_valid,
+);
+save('server2-cert.pem',PEM_cert2string($server0));
+save('server2-key.pem',PEM_key2string($server1));
+$printfp->(server2 => $server0);
+
+@server = CERT_create(
+    CA => 0,
+    subject => { CN => 'server-ecc.local' },
+    subjectAltNames =>   DNS => 'server-ecc.local' ,  IP => '127.0.0.1'  ,
+    purpose => 'server',
+    issuer => \@ca,
+    key => KEY_create_ec(),
+    %time_valid,
+);
+save('server-ecc-cert.pem',PEM_cert2string($server0));
+save('server-ecc-key.pem',PEM_key2string($server1));
+$printfp->('server-ecc' => $server0);
+
+
+my @client = CERT_create(
+    CA => 0,
+    subject => { CN => 'client.local' },
+    purpose => 'client',
+    issuer => \@ca,
+    %time_valid,
+);
+save('client-cert.pem',PEM_cert2string($client0));
+save('client-key.pem',PEM_key2string($client1));
+$printfp->(client => $client0);
+
+my @swc = CERT_create(
+    CA => 0,
+    subject => { CN => 'server.local' },
+    purpose => 'server',
+    issuer => \@ca,
+    subjectAltNames =>  
+	 DNS => '*.server.local' ,
+	 IP => '127.0.0.1' ,
+	 DNS => 'www*.other.local' ,
+	 DNS => 'smtp.mydomain.local' ,
+	 DNS => 'xn--lwe-sna.idntest.local' 
+    ,
+    %time_valid,
+);
+save('server-wildcard.pem',PEM_cert2string($swc0),PEM_key2string($swc1));
+
+
+my @subca = CERT_create(
+    CA => 1,
+    issuer => \@ca,
+    subject => { CN => 'IO::Socket::SSL Demo Sub CA' },
+    %time_valid,
+);
+save('test-subca.pem',PEM_cert2string($subca0));
+@server = CERT_create(
+    CA => 0,
+    subject => { CN => 'server.local' },
+    subjectAltNames =>   DNS => 'server.local' ,  IP => '127.0.0.1'  ,
+    purpose => 'server',
+    issuer => \@subca,
+    %time_valid,
+);
+save('sub-server.pem',PEM_cert2string($server0).PEM_key2string($server1));
+
+
+
+my @cap = CERT_create(
+    CA => 1,
+    subject => { CN => 'IO::Socket::SSL::Intercept' },
+    %time_valid,
+);
+save('proxyca.pem',PEM_cert2string($cap0).PEM_key2string($cap1));
+
+sub save {
+    my $file = shift;
+    open(my $fd,'>',$dir.$file) or die $!;
+    print $fd @_;
+}
+
+system(<<CMD);
+cd $dir
+set -x
+openssl x509 -in server-cert.pem -out server-cert.der -outform der
+openssl rsa -in server-key.pem -out server-key.der -outform der
+openssl rsa -in server-key.pem -out server-key.enc -passout pass:bluebell
+openssl rsa -in client-key.pem -out client-key.enc -passout pass:opossum
+openssl pkcs12 -export -in server-cert.pem -inkey server-key.pem -out server.p12 -descert -passout pass:
+openssl pkcs12 -export -in server-cert.pem -inkey server-key.pem -out server_enc.p12 -descert -passout pass:bluebell
+CMD

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/proxyca.pem Added

@@ -0,0 +1,47 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN PRIVATE KEY-----
+MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQC9crhqFxT9RBxc
+G3hohX3HDdyvdvHPBUNkslXth12y8MXgufjMHsDWvCK6QGSd29HjkCaFtqXJhZJj
+NaLk4kfRpXD/fu2fvWw8JMtlbmzi7LGdBwR9noPyoYYSYC3aTRa0R/75EDFq7ram
+Z1KX7saoiCwcqKsWx+nSsUEjTWH65Eb7Vb8K+L/UIW1e6uOhXPoIfS1H5jzGBjnJ
+Iv3xT+FHbRuUj22RnW4H2CaHzmwscC/37QhGiwnp2eIbFz64oCvGWRBQ+evneQb5
+w4yctlwGZ41L8qO8GUAdlsqki9P1pI77DCoBHH4qljlGr5Sa95cZ69sP4xeciBDt
+OGVunluBAgMBAAECggEASQ9G41MHeyybK0JEyzo/6VYFN33NfyLufJTx4mqDzhBg
+n2vY8Q8jGyzuz5kptF8jsHjVAlgP04m5jJ0Qtug0/jqpOz798M6iQQeHkRRm1ZSm
+YoJkTvWkuRtlkwyYYkm8acYiJHcEN9LbiYzrI0CoSDJLoLnDUUPDfsdw8WZUVOau
+Qz94Z1+RuQ82yicKxdmqCboPvpsrmqnFecYlPHdjHIk1xdR0omoEp5rp7cFQSVAg
+mX85VMeJJAG0MqXvmlHOrB8axi+C56ToD7nXPpEiQpQKRbxSYOCZc8o3jXSrkd4/
+UDVSlevOXHFeeQc1RXVweFk36hajxszKXmWCEkPa6QKBgQDeScGQnZWIRa+A3Z2Z
+T5YuluyXFw5mF86Pkmzr8huj3aUOHKsQBVc7B8CZdZTVOQkvoCmS2gV1dwberu2U
+Zs3KE+SCHVXIP89vKr4fVjDDEq7DaBg8QNuXDV7vjuiH9aaqF3edmNkS3RHq4GA5
+LQblR7cEOzcBtdPw6Nwn8dkizwKBgQDaLfcqU56kjubF+xg0fhi4FUnpdu0rCVLp
+FCzaUmCCAepjAdi2Xs8H74usqrbigbXd07lNEetbU2AWe1B6H5FX7vfWnGRqunvq
+DLUs2dqxXaXRjMISwBuqCCN7odx+uHFFg9B72Ar6QsM33mcJIoM4o9v8LFfVgbtt
+Jbn4FftwrwKBgF4ADqzbFtrzrQ3vqa+lajr1c8NI6rvdoWoxX4I/ddTL6/qVwPkb
+aRH7a0T55iBs6CeNsUb6j4hm9y7ABpPVDX1BAEbNpPLzmQLHrnKN/jzf76uOn4EL
+ZFDyRI1Ff6vPA9W16s1oT5OcjPEoRUioc9wNgaV2bQJ6I9AiiMcTjOEdAoGAUMz7
+H2rOcuUVZDbktPQKFYqUz+iiVvDiCr3VCpm9cghhlH8nkgq0o5y8Xprulh4xi1CQ
+7JD5V94d1NWgbUnpmuY+VPWgXsJnh7tjEZQw4MTs1xlI+oa4+BSBh5TfQvLtyC/T
+8zmEf0Bgaf1srT5h2IUewFpvwPuFvRterxj9ALMCgYAPkbzABqm9EQdynBvoiJYB
+YeOPf0LzGnwl/e1lRMV0mYJlcDZC3jzwe9iTEtlT4CBtyousZyMsT0CFb0cs764p
+5a5v/nHcrTPvh98t1yEIjAXqKigXZtfvttzQGPU60zhzPQqidYfKrhZqHloXOhtI
+m5grczgEd6RbYPixV7HThw==
+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-cert.der Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-cert.pem Added

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-ecc-cert.pem Added

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-ecc-key.pem Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-key.der Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-key.enc Added

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-key.pem Added

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server-wildcard.pem Added

@@ -0,0 +1,50 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server.p12 Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server2-cert.pem Added

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server2-key.pem Added

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/server_enc.p12 Added

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/sub-server.pem Added

@@ -0,0 +1,49 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/test-ca.pem Added

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/certs/test-subca.pem Added

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDPDCCAiSgAwIBAgIEFUCnyTANBgkqhkiG9w0BAQsFADAiMSAwHgYDVQQDDBdJ
+Tzo6U29ja2V0OjpTU0wgRGVtbyBDQTAeFw0yMjEyMTExOTUzNDFaFw0zMjEyMDgx
+OTUzNDFaMCYxJDAiBgNVBAMMG0lPOjpTb2NrZXQ6OlNTTCBEZW1vIFN1YiBDQTCC
+ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3oK3fQnNs4DPUpkvm6+tWp
+XqQTIHnhQD3wgPiS8EB5mW260B024bZl8kUwG60Q1fuXb//0F3eyGSWc6qpNgn0L
+uOb+F1bl5uCt3Nnt3nplw0gBJJB/1sfbQ79bcd3lIEUlA+rLSmGHBrqpULGXCsMx
+o62t5VDSd3kVK7X6pSB9/uzZMgTTwIPi/Pv1TsxLt7w/7byOguFbr4cWs3gSB6gR
+QFJ4ksHx2vxDqbn7Al22sboCfczFdHLtYwbHTuYapGAEQpXQNe2vU8rdTXa9h4gD
+J2Hvb1T+Q78usT9mnvP/2DE6sMWAJPK4yx3q4cmXXl3UsY3JYDoSR07eXmsXz48C
+AwEAAaN2MHQwHQYDVR0OBBYEFFEfos9gOO5pwOWtMjR0eapoWh6DMB8GA1UdIwQY
+MBaAFEnT2LwqEtZvwVkEbtlv/7SmEt9cMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
+AQH/BAQDAgKEMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG9w0BAQsFAAOCAQEA
+nxKApVAjlthCO/veD1/96iVBfCI97Uqc+SsRhajnoqJVq5W+s75XW/oyDUZS0/kQ
+r0WkGLjSDKyVWdQXMJZ0X9sF8/beCX98fTTOktH36B/rQUeEsoWHP1yVp2gRQl9V
+Kw2lnEz74cMETkDgVjDVcCwDaWOkq5Y70itknbobf4Yfncv/qhgtQ7hQmBnzl6NX
+QM2MVmwtYSIEww4sUXfoIf7w+jZwUeSHBz678xa3mMHIkZhRSl+ab2rDyD4BxvcB
+b48KBKzxp2AiQZwlZrDZ3kgGVkqPyzFUCKm1/2OhtBJrKI9m652Cq4j+og7d9S6h
+Dmr5jSiSjhIwLrPcc1yPkw==
+-----END CERTIFICATE-----

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/compatibility.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/compatibility.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/connectSSL-timeout.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/connectSSL-timeout.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/core.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/core.t Changed

@@ -46,7 +46,7 @@
     Timeout => 30,
     ReuseAddr => 1,
     SSL_verify_mode => 0x00,
-    SSL_ca_file => "certs/test-ca.pem",
+    SSL_ca_file => "t/certs/test-ca.pem",
     SSL_version => $tls_version,
     SSL_error_trap => sub {
 	my $self = shift;
@@ -54,8 +54,8 @@
 	$error_trapped = 1;
 	$self->close;
     },
-    SSL_cert_file => "certs/server-cert.pem",
-    SSL_key_file => "certs/server-key.enc",
+    SSL_cert_file => "t/certs/server-cert.pem",
+    SSL_key_file => "t/certs/server-key.enc",
     SSL_passwd_cb => sub { return "bluebell" },
 );
 
@@ -82,10 +82,10 @@
 	LocalAddr => $localip,
 	Domain => AF_INET,
 	SSL_verify_mode => 0x01,
-	SSL_ca_file => "certs/test-ca.pem",
+	SSL_ca_file => "t/certs/test-ca.pem",
 	SSL_use_cert => 1,
-	SSL_cert_file => "certs/client-cert.pem",
-	SSL_key_file => "certs/client-key.enc",
+	SSL_cert_file => "t/certs/client-cert.pem",
+	SSL_key_file => "t/certs/client-key.enc",
 	SSL_passwd_cb => sub { return "opossum" },
 	SSL_verify_callback => \&verify_sub,
     );
@@ -130,7 +130,6 @@
 		    4.0,
 		    ord("y"),
 		    "Test\nBeaver\nBeaver\n");
-    shutdown($client, 1);
 
     my $buffer="\0\0aaaaaaaaaaaaaaaaaaaa";
     $client->sysread($buffer, 7, 2);
@@ -185,10 +184,10 @@
 	    LocalAddr => $localip,
 	    Domain => AF_INET,
 	    SSL_verify_mode => 0x01,
-	    SSL_ca_file => "certs/test-ca.pem",
+	    SSL_ca_file => "t/certs/test-ca.pem",
 	    SSL_use_cert => 1,
-	    SSL_cert_file => "certs/client-cert.pem",
-	    SSL_key_file => "certs/client-key.enc",
+	    SSL_cert_file => "t/certs/client-cert.pem",
+	    SSL_key_file => "t/certs/client-key.enc",
 	    SSL_passwd_cb => sub { return "opossum" },
 	    Blocking => 0,
 	);
@@ -247,7 +246,7 @@
 
 is( getc($client), "\$", "Server Getc Check");
 
-@array = <$client>;
+@array = map { scalar <$client> } (0..5);
 is( scalar @array, 6, "Server Getlines Check 1");
 
 is( $array0, "1.04\n", "Server Getlines Check 2");

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/dhe.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/dhe.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/ecdhe.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/ecdhe.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/external/fingerprint.pl -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/external/fingerprint.pl Changed

@@ -1,5 +1,5 @@
 # to update fingerprints in this file:
-# perl -e 'do qt/external/fingerprint.pl; update_fingerprints()'
+# perl -e 'do q./t/external/fingerprint.pl; update_fingerprints()'
 
 use strict;
 use warnings;
@@ -18,17 +18,17 @@
   },
   {
     _ => 'no OCSP stapling',
-    fingerprint => 'sha1$pub$f8c51d37c070c423ccc5f6065e080b94ce03494c',
+    fingerprint => 'sha1$pub$c8ba0806b887fc15e9d98e73107a17150f847bbf',
     host => 'www.bild.de',
     ocsp => {
               staple => 0
             },
     port => 443,
-    subject_hash_ca => 'e2799e36'
+    subject_hash_ca => '3513523f'
   },
   {
     _ => 'this is revoked',
-    fingerprint => 'sha1$pub$75f8bfe5feac656c894c06011422b6455854b4e5',
+    fingerprint => 'sha1$pub$f0f0c49b8a04a2dd2110e10f7806c97d87d0b26f',
     host => 'revoked.grc.com',
     ocsp => {
               revoked => 1
@@ -36,40 +36,40 @@
     port => 443
   },
   {
-    fingerprint => 'sha1$pub$56f745d484d13c95ad58142ef4d1cc2f11c073f6',
+    fingerprint => 'sha1$pub$7397f9dea15c007ad1eabe7a0c895ccac60389b1',
     host => 'www.yahoo.com',
     port => 443,
     subject_hash_ca => '244b5494'
   },
   {
-    fingerprint => 'sha1$pub$52509cfecdc8264c21da6279360e89c1be1bc30a',
+    fingerprint => 'sha1$pub$c40d9bc2496fa2db198b27b6c1f94d1c703e7039',
     host => 'www.comdirect.de',
     port => 443,
-    subject_hash_ca => '02265526'
+    subject_hash_ca => '062cdee6'
   },
   {
-    fingerprint => 'sha1$pub$c2ee1cc0963c55286bcd549f1d782c5557602f4c',
+    fingerprint => 'sha1$pub$26907a3f3088cf57264f7a0f083767e400ea871e',
     host => 'meine.deutsche-bank.de',
     port => 443,
-    subject_hash_ca => 'c01cdfa2'
+    subject_hash_ca => '607986c7'
   },
   {
-    fingerprint => 'sha1$pub$5414c379b16298b2352812d7f5c7f4b576da9efa',
+    fingerprint => 'sha1$pub$232e02961a493a2e528460d0d3c0720a8f533428',
     host => 'www.twitter.com',
     port => 443,
-    subject_hash_ca => '244b5494'
+    subject_hash_ca => '3513523f'
   },
   {
-    fingerprint => 'sha1$pub$7b89d1ee6a48e3abc504ee1642dbc7d0fc74965b',
+    fingerprint => 'sha1$pub$12b35a6d540bcba5f9ff055fdcc5af0dac67fc73',
     host => 'www.facebook.com',
     port => 443,
     subject_hash_ca => '244b5494'
   },
   {
-    fingerprint => 'sha1$pub$9c070a464b2eb1ee315120bcd0a0ba82e711be9c',
+    fingerprint => 'sha1$pub$6ad05c9dd77463152389f755cb6a81c41c33c987',
     host => 'www.live.com',
     port => 443,
-    subject_hash_ca => '653b494a'
+    subject_hash_ca => '3513523f'
   }
 
 ;

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/io-socket-inet6.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/io-socket-inet6.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/io-socket-ip.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/io-socket-ip.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/memleak_bad_handshake.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/memleak_bad_handshake.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/mitm.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/mitm.t Changed

@@ -16,8 +16,8 @@
 my $server = IO::Socket::SSL->new(
     LocalAddr => '127.0.0.1',
     LocalPort => 0,
-    SSL_cert_file => 'certs/server-cert.pem',
-    SSL_key_file => 'certs/server-key.pem',
+    SSL_cert_file => 't/certs/server-cert.pem',
+    SSL_key_file => 't/certs/server-key.pem',
     Listen => 10,
 );
 ok($server,"server ssl socket");
@@ -45,7 +45,7 @@
     PeerAddr => $saddr,
     Domain => AF_INET,
     SSL_verify_mode => 1,
-    SSL_ca_file => 'certs/test-ca.pem',
+    SSL_ca_file => 't/certs/test-ca.pem',
 );
 ssl_ok($cl,"ssl connected to server");
 ok( $cl->peer_certificate('subject') =~ m{server\.local}, "subject w/o mitm");
@@ -57,7 +57,7 @@
     PeerAddr => $paddr,
     Domain => AF_INET,
     SSL_verify_mode => 1,
-    SSL_ca_file => 'certs/proxyca.pem',
+    SSL_ca_file => 't/certs/proxyca.pem',
 );
 ssl_ok($cl,"ssl connected to proxy");
 ok( $cl->peer_certificate('subject') =~ m{server\.local}, "subject w/ mitm");
@@ -74,8 +74,8 @@
 
 sub proxy {
     my $mitm = IO::Socket::SSL::Intercept->new(
-	proxy_cert_file => 'certs/proxyca.pem',
-	proxy_key_file => 'certs/proxyca.pem',
+	proxy_cert_file => 't/certs/proxyca.pem',
+	proxy_key_file => 't/certs/proxyca.pem',
     );
     while (1) {
 	my $toc = $proxy->accept or next;
@@ -83,7 +83,7 @@
 	    PeerAddr => $saddr,
 	    Domain => AF_INET,
 	    SSL_verify_mode => 1,
-	    SSL_ca_file => 'certs/test-ca.pem',
+	    SSL_ca_file => 't/certs/test-ca.pem',
 	) or die "failed connect to server: $!, $SSL_ERROR";
 	my ($cert,$key) = $mitm->clone_cert($tos->peer_certificate);
 	$toc = IO::Socket::SSL->start_SSL( $toc,

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/multiple-cert-rsa-ecc.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/multiple-cert-rsa-ecc.t Changed

@@ -23,14 +23,14 @@
 
 my %certs = (
     SSL_cert_file => {
-	'' => 'certs/server-cert.pem',
-	'%ecc' => "certs/server-ecc-cert.pem",
-	'server2.local' => 'certs/server2-cert.pem',
+	'' => 't/certs/server-cert.pem',
+	'%ecc' => "t/certs/server-ecc-cert.pem",
+	'server2.local' => 't/certs/server2-cert.pem',
     },
     SSL_key_file => {
-	'' => 'certs/server-key.pem',
-	'%ecc' => 'certs/server-ecc-key.pem',
-	'server2.local' => 'certs/server2-key.pem',
+	'' => 't/certs/server-key.pem',
+	'%ecc' => 't/certs/server-ecc-key.pem',
+	'server2.local' => 't/certs/server2-key.pem',
     }
 );
 
@@ -49,7 +49,7 @@
     Listen => 2,
     ReuseAddr => 1,
     SSL_server => 1,
-    SSL_ca_file => "certs/test-ca.pem",
+    SSL_ca_file => "t/certs/test-ca.pem",
     SSL_honor_cipher_order => 0,
     SSL_cipher_list => 'ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA',
     %certs,
@@ -86,7 +86,7 @@
 	    Domain => AF_INET,
 	    SSL_verify_mode => 0,
 	    SSL_hostname => $host,
-	    SSL_ca_file => 'certs/test-ca.pem',
+	    SSL_ca_file => 't/certs/test-ca.pem',
 	    SSL_cipher_list => $ciphers,
 	    # don't use TLS 1.3 since the ciphers there don't specifify the
 	    # authentication mechanism

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/nonblock.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/nonblock.t Changed

@@ -121,7 +121,7 @@
 	if ( ! IO::Socket::SSL->start_SSL( $to_server,
 	    SSL_startHandshake => 0,
 	    SSL_verify_mode => 0,
-	    SSL_key_file => "certs/server-key.enc",
+	    SSL_key_file => "t/certs/server-key.enc",
 	    SSL_passwd_cb => sub { return "bluebell" },
 	)) {
 	    diag( 'start_SSL return undef' );
@@ -178,11 +178,8 @@
 	    };
 	}
 
-	my $test_might_fail;
-	if ( $@ ) {
-	    # the next test might fail because setsockopt(... SO_SNDBUF...) failed
-	    $test_might_fail = 1;
-	}
+	# This test is too much dependant on OS
+	my $test_might_fail = 1;
 
 	my $can;
 	WRITE:
@@ -240,7 +237,7 @@
 	ok( "syswrite" );
 
 	if ( ! $attempts && $test_might_fail ) {
-	    ok( " write attempts failed, but OK nevertheless because setsockopt failed" );
+	    ok( "write attempts failed, but OK nevertheless because we know it can fail" );
 	} else {
 	    print "not " if !$attempts;
 	    ok( "multiple write attempts" );
@@ -292,10 +289,10 @@
 	    SSL_startHandshake => 0,
 	    SSL_server => 1,
 	    SSL_verify_mode => 0x00,
-	    SSL_ca_file => "certs/test-ca.pem",
+	    SSL_ca_file => "t/certs/test-ca.pem",
 	    SSL_use_cert => 1,
-	    SSL_cert_file => "certs/client-cert.pem",
-	    SSL_key_file => "certs/client-key.enc",
+	    SSL_cert_file => "t/certs/client-cert.pem",
+	    SSL_key_file => "t/certs/client-key.enc",
 	    SSL_passwd_cb => sub { return "opossum" },
 	)) {
 	    diag( 'start_SSL return undef' );

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/npn.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/npn.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/plain_upgrade_downgrade.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/plain_upgrade_downgrade.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/protocol_version.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/protocol_version.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/readline.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/readline.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/session_cache.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/session_cache.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/session_ticket.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/session_ticket.t Changed

@@ -12,6 +12,19 @@
 
 plan tests => 6;
 
+# create two servers with the same session ticket callback
+my (@server,@saddr);
+for (1,2) {
+    my $server = IO::Socket::INET->new(
+	LocalAddr => '127.0.0.1',
+	LocalPort => 0,
+	Listen => 2,
+    ) or die "failed to create listener: $!";
+    push @server,{ fd => $server };
+    push @saddr, $server->sockhost.':'.$server->sockport;
+    diag("listen at $saddr-1");
+}
+
 # create some self signed certificate
 my ($cert,$key) = CERT_create(CA => 1,
     subject => { CN => 'ca' },
@@ -24,21 +37,14 @@
 my ($server_cert,$server_key) = CERT_create(
     issuer =>  $cert,$key,
     subject => { CN => 'server' },
+    subjectAltNames => 
+	 DNS => 'server' ,
+	 IP => $saddr0=~m{^(.*):} && $1 ,
+	 IP => $saddr1=~m{^(.*):} && $1 ,
+    ,
     purpose => { server => 1 }
 );
 
-# create two servers with the same session ticket callback
-my (@server,@saddr);
-for (1,2) {
-    my $server = IO::Socket::INET->new(
-	LocalAddr => '127.0.0.1',
-	LocalPort => 0,
-	Listen => 2,
-    ) or die "failed to create listener: $!";
-    push @server,{ fd => $server };
-    push @saddr, $server->sockhost.':'.$server->sockport;
-    diag("listen at $saddr-1");
-}
 
 defined( my $pid = fork() ) || die $!;
 exit(_server()) if ! $pid;
@@ -57,6 +63,10 @@
     SSL_key => $client_key,
     SSL_ca =>  $cert ,
 
+    # LibreSSL has currently no support for TLS 1.3 session handling
+    # therefore enforce TLS 1.2
+    Net::SSLeay::constant("LIBRESSL_VERSION_NUMBER") ?
+	(SSL_version => 'TLSv1_2') :
     # versions of Net::SSLeay with support for SESSION_up_ref have also the
     # other functionality needed for proper TLS 1.3 session handling
     defined(&Net::SSLeay::SESSION_up_ref) ? ()

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/sessions.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/sessions.t Changed

@@ -43,13 +43,17 @@
     $what = 'client';
     @servers = ();
     my $ctx = IO::Socket::SSL::SSL_Context->new(
-	 SSL_ca_file => "certs/test-ca.pem",
-	 # make cache large enough since we get multiple tickets with TLS 1.3
-	 SSL_session_cache_size => 100,
+	SSL_ca_file => "t/certs/test-ca.pem",
+	# make cache large enough since we get multiple tickets with TLS 1.3
+	SSL_session_cache_size => 100,
+	# LibreSSL has currently no support for TLS 1.3 session handling
+	# therefore enforce TLS 1.2
+	Net::SSLeay::constant("LIBRESSL_VERSION_NUMBER") ?
+	    (SSL_version => 'TLSv1_2') :
 	# versions of Net::SSLeay with support for SESSION_up_ref have also the
 	# other functionality needed for proper TLS 1.3 session handling
-	defined(&Net::SSLeay::SESSION_up_ref) ? ()
-	    : (SSL_version => 'SSLv23:!TLSv1_3:!SSLv3:!SSLv2'),
+	defined(&Net::SSLeay::SESSION_up_ref) ? () :
+	    (SSL_version => 'SSLv23:!TLSv1_3:!SSLv3:!SSLv2'),
     );
 
     my $cache = $ctx->{session_cache} or do {
@@ -112,9 +116,9 @@
     my @ctx = map {
 	IO::Socket::SSL::SSL_Context->new(
 	    SSL_server => 1,
-	    SSL_cert_file => "certs/server-cert.pem",
-	    SSL_key_file => "certs/server-key.pem",
-	    SSL_ca_file => "certs/test-ca.pem",
+	    SSL_cert_file => "t/certs/server-cert.pem",
+	    SSL_key_file => "t/certs/server-key.pem",
+	    SSL_ca_file => "t/certs/test-ca.pem",
 	);
     } @servers;
     my @clients;

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/set_curves.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/set_curves.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/signal-readline.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/signal-readline.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/sni.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/sni.t Changed

@@ -23,18 +23,18 @@
     Listen => 2,
     ReuseAddr => 1,
     SSL_server => 1,
-    SSL_ca_file => "certs/test-ca.pem",
+    SSL_ca_file => "t/certs/test-ca.pem",
     SSL_cert_file => {
-	'server.local' => 'certs/server-cert.pem',
-	'server2.local' => 'certs/server2-cert.pem',
-	'smtp.mydomain.local' => "certs/server-wildcard.pem",
-	'' => "certs/server-wildcard.pem",
+	'server.local' => 't/certs/server-cert.pem',
+	'server2.local' => 't/certs/server2-cert.pem',
+	'smtp.mydomain.local' => "t/certs/server-wildcard.pem",
+	'' => "t/certs/server-wildcard.pem",
     },
     SSL_key_file => {
-	'server.local' => 'certs/server-key.pem',
-	'server2.local' => 'certs/server2-key.pem',
-	'smtp.mydomain.local' => "certs/server-wildcard.pem",
-	'' => "certs/server-wildcard.pem",
+	'server.local' => 't/certs/server-key.pem',
+	'server2.local' => 't/certs/server2-key.pem',
+	'smtp.mydomain.local' => "t/certs/server-wildcard.pem",
+	'' => "t/certs/server-wildcard.pem",
     },
 );
 
@@ -62,12 +62,14 @@
 	    Domain => AF_INET,
 	    SSL_verify_mode => 1,
 	    SSL_hostname => $host,
-	    SSL_ca_file => 'certs/test-ca.pem',
+	    SSL_ca_file => 't/certs/test-ca.pem',
 	);
 	if ($client) {
 	    print "ok # client ssl connect $host\n";
 	    $client->verify_hostname($host,'http') or print "not ";
 	    print "ok # client verify hostname in cert $host\n";
+	    # wait for server to send something to make sure finished accept
+	    <$client>;
 	} else {
 	    print "not ok # client ssl connect $host - $SSL_ERROR\n";
 	    print "ok # skip connect failed\n";
@@ -83,6 +85,7 @@
 	my $name = $csock->get_servername;
 	print "not " if ! $name or $name ne $host;
 	print "ok # server got SNI name $host\n";
+	print $csock "hi\n";
     } else {
 	print "not ok # server accept - $SSL_ERROR\n";
 	print "ok # skip accept failed\n";

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/sni_verify.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/sni_verify.t Changed

@@ -23,18 +23,18 @@
     Listen => 2,
     ReuseAddr => 1,
     SSL_server => 1,
-    SSL_ca_file => "certs/test-ca.pem",
+    SSL_ca_file => "t/certs/test-ca.pem",
     SSL_cert_file => {
-	'server.local' => 'certs/server-cert.pem',
-	'server2.local' => 'certs/server2-cert.pem',
-	'smtp.mydomain.local' => "certs/server-wildcard.pem",
-	'' => "certs/server-wildcard.pem",
+	'server.local' => 't/certs/server-cert.pem',
+	'server2.local' => 't/certs/server2-cert.pem',
+	'smtp.mydomain.local' => "t/certs/server-wildcard.pem",
+	'' => "t/certs/server-wildcard.pem",
     },
     SSL_key_file => {
-	'server.local' => 'certs/server-key.pem',
-	'server2.local' => 'certs/server2-key.pem',
-	'smtp.mydomain.local' => "certs/server-wildcard.pem",
-	'' => "certs/server-wildcard.pem",
+	'server.local' => 't/certs/server-key.pem',
+	'server2.local' => 't/certs/server2-key.pem',
+	'smtp.mydomain.local' => "t/certs/server-wildcard.pem",
+	'' => "t/certs/server-wildcard.pem",
     },
     SSL_verify_mode => 1
 );
@@ -63,14 +63,16 @@
 	    Domain => AF_INET,
 	    SSL_verify_mode => 1,
 	    SSL_hostname => $host,
-	    SSL_ca_file => 'certs/test-ca.pem',
-            SSL_cert_file => 'certs/client-cert.pem',
-            SSL_key_file => 'certs/client-key.pem',
+	    SSL_ca_file => 't/certs/test-ca.pem',
+            SSL_cert_file => 't/certs/client-cert.pem',
+            SSL_key_file => 't/certs/client-key.pem',
 	);
 	if ($client) {
 	    print "ok # client ssl connect $host\n";
 	    $client->verify_hostname($host,'http') or print "not ";
 	    print "ok # client verify hostname in cert $host\n";
+	    # wait for server to send something to make sure finished accept
+	    <$client>;
 	} else {
 	    print "not ok # client ssl connect $host - $SSL_ERROR\n";
 	    print "ok # skip connect failed\n";
@@ -86,6 +88,7 @@
 	my $name = $csock->get_servername;
 	print "not " if ! $name or $name ne $host;
 	print "ok # server got SNI name $host\n";
+	print $csock "hi\n";
     } else {
 	print "not ok # server accept - $SSL_ERROR\n";
 	print "ok # skip accept failed\n";

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/start-stopssl.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/start-stopssl.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/startssl.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/startssl.t Changed

@@ -47,8 +47,8 @@
 
     unless ( IO::Socket::SSL->start_SSL( $client,
 	SSL_verify_mode => 0,
-	SSL_cert_file => "certs/client-cert.pem",
-	SSL_key_file => "certs/client-key.enc",
+	SSL_cert_file => "t/certs/client-cert.pem",
+	SSL_key_file => "t/certs/client-key.enc",
 	SSL_passwd_cb => sub { return "opossum" }
     )) {
 	#DEBUG( $SSL_ERROR );
@@ -64,7 +64,7 @@
     $client->sock_certificate('issuer') =~ /IO::Socket::SSL Demo CA/ or print "not ";
     ok("client local certificate issuer");
     $client->get_fingerprint('sha256',$client->sock_certificate)
-	eq $getfp->('certs/client-cert.pem')
+	eq $getfp->('t/certs/client-cert.pem')
 	or print "not ";
     ok("client local certificate fingerprint");
 
@@ -73,7 +73,7 @@
     $client->peer_certificate('issuer') =~ /IO::Socket::SSL Demo CA/ or print "not ";
     ok("client peer certificate issuer");
     $client->get_fingerprint()
-	eq $getfp->('certs/server-cert.pem')
+	eq $getfp->('t/certs/server-cert.pem')
 	or print "not ";
     ok("client peer certificate fingerprint");
 
@@ -89,9 +89,9 @@
 IO::Socket::SSL->start_SSL( $csock,
     SSL_server => 1,
     SSL_verify_mode => SSL_VERIFY_PEER|SSL_VERIFY_FAIL_IF_NO_PEER_CERT,
-    SSL_ca_file => "certs/test-ca.pem",
-    SSL_cert_file => "certs/server-cert.pem",
-    SSL_key_file => "certs/server-key.enc",
+    SSL_ca_file => "t/certs/test-ca.pem",
+    SSL_cert_file => "t/certs/server-cert.pem",
+    SSL_key_file => "t/certs/server-key.enc",
     SSL_passwd_cb => sub { return "bluebell" },
 ) || print "not ";
 #DEBUG( $IO::Socket::SSL::ERROR );
@@ -105,7 +105,7 @@
 $csock->sock_certificate('issuer') =~ /IO::Socket::SSL Demo CA/ or print "not ";
 ok("server local certificate issuer");
 $csock->get_fingerprint('sha256',$csock->sock_certificate)
-    eq $getfp->('certs/server-cert.pem')
+    eq $getfp->('t/certs/server-cert.pem')
     or print "not ";
 ok("server local certificate fingerprint");
 
@@ -114,7 +114,7 @@
 $csock->peer_certificate('issuer') =~ /IO::Socket::SSL Demo CA/ or print "not ";
 ok("server peer certificate issuer");
 $csock->get_fingerprint()
-    eq $getfp->('certs/client-cert.pem')
+    eq $getfp->('t/certs/client-cert.pem')
     or print "not ";
 ok("server peer certificate fingerprint");

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/sysread_write.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/sysread_write.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/verify_fingerprint.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/verify_fingerprint.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/verify_hostname.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/verify_hostname.t Changed

_service:tar_scm:IO-Socket-SSL-2.072.tar.gz/t/verify_partial_chain.t -> _service:tar_scm:IO-Socket-SSL-2.081.tar.gz/t/verify_partial_chain.t Changed

Changes of Revision 2