Bug#788035: libio-socket-ssl-perl: ICANN patch (https://bugs.debian.org/767692) making IO::Socket::SSL unusable

[Jonny Schulz]

Package: libio-socket-ssl-perl
Version: 2.002-2
Severity: important

Dear Maintainer,

you can reproduce the error as follows:

#--------------------------------------------------
#!/usr/bin/perl
use strict;
use warnings;
use IO::Socket::SSL;

fork;

eval {
    IO::Socket::SSL->new(
        PeerAddr => 'www.bloonix.de',
        SSL_verifycn_scheme => 'http',
        SSL_ca_path => '/etc/ssl/certs',
        PeerPort => '443',
        SSL_verify_mode => 1,
        Timeout => 10
    ) or die "error=$!, ssl_error=$SSL_ERROR";
};

print ($@ ? "$$ err: $@" : "$$ ok\n");
#--------------------------------------------------

Output:

14580 err: cannot find END ICANN DOMAINS at /usr/share/perl5/IO/Socket/SSL/PublicSuffix.pm line 296, <DATA> line 1.
14579 ok

The problem seems to be patch 0001-use-only-ICANN-part-in-public-suffix-list.patch. IO::Socket::SSL crashes if the process is forked and is unusable.

Cheers
Jonny


-- System Information:
Debian Release: 8.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libio-socket-ssl-perl depends on:
ii  libnet-ssleay-perl  1.65-1+b1
ii  netbase             5.3
ii  perl                5.20.2-3+deb8u1

Versions of packages libio-socket-ssl-perl recommends:
ii  libio-socket-inet6-perl     2.72-1
ii  libnet-libidn-perl          0.12.ds-2+b1
ii  libsocket6-perl             0.25-1+b1
ii  perl                        5.20.2-3+deb8u1
ii  perl-base [libsocket-perl]  5.20.2-3+deb8u1

Versions of packages libio-socket-ssl-perl suggests:
ii  ca-certificates  20141019

-- no debconf information