Back to bug 1375525

Who When What Removed Added
Jitka Plesnikova 2016-09-13 11:00:49 UTC Status NEW ASSIGNED
Assignee perl-maint-list jplesnik
Jitka Plesnikova 2016-09-13 11:04:20 UTC Status ASSIGNED MODIFIED
Fixed In Version perl-IO-Socket-SSL-1.31-3.el6_8.1
errata-xmlrpc 2016-09-13 11:25:11 UTC Status MODIFIED ON_QA
Jitka Plesnikova 2016-09-13 14:19:24 UTC Doc Text Feature:
Net:SSLeay was updated to support explicitly specifying
protocol versions TLSv1.1 or TLSv1.2. IO::Socket::SSL
was updated to take advantage of this change.
Reason:
Restricting TLS to recent TLS version is necessary for
tightening security.
Result:
When new IO::Socket::SSL object is creating, it's
possible to restrict TLS version to 1.1/1.2 version by
setting the option SSL_version to value TLSv1_1/TLSv1_2.
All values are case-insensitive. Instead of 'TLSv1_1'
and 'TLSv1_2' one can also use 'TLSv11' and 'TLSv12'.
Matus Marhefka 2016-09-21 08:26:43 UTC CC mmarhefk
QA Contact qe-baseos-security mmarhefk
errata-xmlrpc 2016-09-23 08:34:27 UTC Status ON_QA VERIFIED
Matus Marhefka 2016-09-26 11:09:37 UTC Status VERIFIED ASSIGNED
Jitka Plesnikova 2016-09-27 11:08:38 UTC Status ASSIGNED ON_QA
Jitka Plesnikova 2016-09-27 11:11:13 UTC Fixed In Version perl-IO-Socket-SSL-1.31-3.el6_8.1 perl-IO-Socket-SSL-1.31-3.el6_8.2
errata-xmlrpc 2016-09-27 13:20:19 UTC Status ON_QA VERIFIED
errata-xmlrpc 2016-11-15 00:25:26 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-11-15 20:48:11 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-11-15 15:48:11 UTC

Back to bug 1375525