head	1.2;
access;
symbols
	pkgsrc-2013Q2:1.2.0.24
	pkgsrc-2013Q2-base:1.2
	pkgsrc-2012Q4:1.2.0.22
	pkgsrc-2012Q4-base:1.2
	pkgsrc-2011Q4:1.2.0.20
	pkgsrc-2011Q4-base:1.2
	pkgsrc-2011Q2:1.2.0.18
	pkgsrc-2011Q2-base:1.2
	pkgsrc-2009Q4:1.2.0.16
	pkgsrc-2009Q4-base:1.2
	pkgsrc-2008Q4:1.2.0.14
	pkgsrc-2008Q4-base:1.2
	pkgsrc-2008Q3:1.2.0.12
	pkgsrc-2008Q3-base:1.2
	cube-native-xorg:1.2.0.10
	cube-native-xorg-base:1.2
	pkgsrc-2008Q2:1.2.0.8
	pkgsrc-2008Q2-base:1.2
	pkgsrc-2008Q1:1.2.0.6
	pkgsrc-2008Q1-base:1.2
	pkgsrc-2007Q4:1.2.0.4
	pkgsrc-2007Q4-base:1.2
	pkgsrc-2007Q3:1.2.0.2
	pkgsrc-2007Q3-base:1.2;
locks; strict;
comment	@# @;


1.2
date	2007.10.06.06.12.35;	author taca;	state dead;
branches;
next	1.1;

1.1
date	2007.09.30.04.08.16;	author taca;	state Exp;
branches;
next	;


desc
@@


1.2
log
@Update Ruby packages to 1.8.6-p111.

Basically, no change since previous update except Net::HTTP default
@@enable_post_connection_check was wrongly set to true.  (It might
cause compatibility problem.)
@
text
@$NetBSD: patch-ai,v 1.1 2007/09/30 04:08:16 taca Exp $

--- ChangeLog.orig	2007-09-23 09:01:50.000000000 +0900
+++ ChangeLog
@@@@ -1,3 +1,17 @@@@
+Sun Sep 23 21:57:25 2007  GOTOU Yuuzou  <gotoyuzo@@notwork.org>  
+
+	* lib/net/http.rb: an SSL verification (the server hostname should
+	  be matched with its certificate's commonName) is added.
+	  this verification can be skipped by
+	  "Net::HTTP#enable_post_connection_check=(false)".
+	  suggested by Chris Clark <cclark at isecpartners.com>
+
+	* lib/net/open-uri.rb: use Net::HTTP#enable_post_connection_check to
+	  perform SSL post connection check.
+
+	* ext/openssl/lib/openssl/ssl.c
+	(OpenSSL::SSL::SSLSocket#post_connection_check): refine error message.
+
 Sun Sep 23 07:49:49 2007  Nobuyoshi Nakada  <nobu@@ruby-lang.org>
 
 	* eval.c, intern.h, ext/thread/thread.c: should not free queue while
@


1.1
log
@Add patches against Ruby 1.8.6-p111.  Since 1.8.6-p111 dosen't
officially released (SVN's tag only), I decide to keep pkgsrc's Ruby's
version.

This isn't leaf package but fixes security problem reported by
http://www.isecpartners.com/advisories/2007-006-rubyssl.txt.

Bump PKGREVISION.
@
text
@d1 1
a1 1
$NetBSD$
@