Bug#954044: libcpan-perl-releases-perl: Please verify server identity via SSL

2020-04-29 Thread gregor herrmann
On Wed, 29 Apr 2020 08:46:44 +0200, Salvatore Bonaccorso wrote: > > Will you please turn on the verify_SSL attribute in HTTP::Tiny? > > Unless mistaken, HTTP::Tiny is only used in tools/ which are installed > as examples on how one can potentially use CPAN::Perl::Releases. > > Still, this shoul

Bug#954044: libcpan-perl-releases-perl: Please verify server identity via SSL

2020-04-28 Thread Salvatore Bonaccorso
Control: severity -1 wishlist Hi, On Sun, Mar 15, 2020 at 06:44:19PM -0700, Felix Lechner wrote: > Package: libcpan-perl-releases-perl > Severity: important > > Dear maintainer, > > Your package uses the Perl module HTTP::Tiny (admittedly with plain > http://) but it does not set the verify_SSL

Bug#954044: libcpan-perl-releases-perl: Please verify server identity via SSL

2020-03-15 Thread Felix Lechner
Package: libcpan-perl-releases-perl Severity: important Dear maintainer, Your package uses the Perl module HTTP::Tiny (admittedly with plain http://) but it does not set the verify_SSL attribute to a true value. By default, that module does not validate the identity of server certificates. The d