develooper Front page | perl.beginners | Postings from February 2009

Re: What SSL version does LWP use?

Thread Previous
Jim Gibson
February 18, 2009 12:10
Re: What SSL version does LWP use?
Message ID:
On 2/18/09 Wed  Feb 18, 2009  12:06 PM, "David Shere"
<> scribbled:

> Either I'm blind or the LWP package documentation at
> doesn't say
> what SSL standard it uses, or if it can use more than one.
> I recently received notice that I must "update any applications or
> integrations that may be using the SSL 2.0 protocol to support the more
> current SSL 3.0/TLS 1.0 protocols" and I can't figure out if I'm using
> 2.0 now, or 3.0 now, or if I even need to worry about this.

This might help:



The libwww-perl package has support for using SSL/TLSv1 with its HTTP
client and server classes. This support makes it possible to access
https schemed URLs with LWP. Because of the problematic status of
encryption software in general and certain encryption algorithms in
particular, in several countries, libwww-perl package doesn't include
SSL functionality out-of-the-box.

Encryption support is obtained through the use of Crypt::SSLeay or
IO::Socket::SSL, which can both be found from CPAN. While libwww-perl
has "plug-and-play" support for both of these modules (as of v5.45),
the recommended module to use is Crypt::SSLeay. In addition to
bringing SSL support to the LWP package, IO::Socket::SSL can be used
as an object oriented interface to SSL encrypted network sockets.

There is yet another SSL interface for perl called Net::SSLeay. It has
a more complete SSL interface and can be used for web client
programming among other things but doesn't directly support LWP.

The underlying SSL support in all of these modules is based on OpenSSL
<> (formerly SSLeay). For WWW-server side SSL
support (e.g. CGI/FCGI scripts) in Apache see <>.

Thread Previous Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at | Group listing | About