Package: liblwpx-paranoidagent-perl
Version: 1.10-4
Severity: normal
Tags: patch upstream

IkiWiki user 'Chap' reported on
<http://ikiwiki.info/plugins/openid/troubleshooting/> that LWPx::Protocol
does not work with https servers that rely on SNI, because
IO::Socket::SSL ignores the PeerHost parameter if PeerAddr is also specified:

https://github.com/noxxi/p5-io-socket-ssl/commit/4f83a3cd85458bd2141f0a9f22f787174d51d587#diff-1

and suggested this patch:

--- LWPx/Protocol/http_paranoid.pm    2014-09-08 03:33:00.000000000 -0400
+++ LWPx/Protocol/http_paranoid.pm    2014-09-08 03:33:27.000000000 -0400
@@ -73,6 +73,7 @@
        close($el);
         $sock = $self->socket_class->new(PeerAddr => $addr,
                                          PeerHost => $host,
+                                         SSL_hostname => $host,
                                          PeerPort => $port,
                                          Proto    => 'tcp',
                                          Timeout  => $conn_timeout,

Please consider applying that change and/or forwarding it upstream.

Thanks,
    S


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to