Hi all,

I've just uploaded developer versions of the Net-OpenID distributions to
CPAN:

http://search.cpan.org/~robn/Net-OpenID-Common-1.030099_001/
http://search.cpan.org/~robn/Net-OpenID-Consumer-1.030099_001/
http://search.cpan.org/~robn/Net-OpenID-Server-1.030099_001/

The intent here is that once they've had some testing and a bit of spit and
polish, they'll be released as version 1.5 (or 1.500.0 if you prefer. A big
version bump to make sure its very clear that these are moved on from their
previous versions).

The changes are mostly just restructuring to make the code easier to work
with moving forward and easier to install:

* Split utility code common to both -Consumer and -Server out into
Net-OpenID-Common
* Uses on Crypt::DH::GMP instead of Crypt::DH

There are a few new features and fixes though, taken from some of the
community forks and patches around the place. The major ones:

* Fix potential timing attacks when comparing signatures
* Support for HMAC-SHA256 signatures in -Server
* Support fetching request args from Apache2::Request (mod_perl 2) objects

And one interface change:

* 'get_args' and 'post_args' in -Server have been combined into a single
'args' option. The old options are now deprecated and produce a warning.
They will be removed in a future version.

If you have a RP or OP written using Net::OpenID I would very much
appreciate you testing with these packages and reporting whether or not they
work. You should find that they work without having to change any of your
code. This was the case for my own OP but I've not written an RP yet to test
with.

All going well, these will be released as 1.5 soon, and then work will start
on new features and major refactorings and whatever else. First on my list
is finishing off OpenID 2.0 server support and getting server extensions
working (my immediate need).

Feel free to report bugs or features or whatever else. RT is preferred:

http://rt.cpan.org/NoAuth/Bugs.html?Dist=Net-OpenID-Common
http://rt.cpan.org/NoAuth/Bugs.html?Dist=Net-OpenID-Consumer
http://rt.cpan.org/NoAuth/Bugs.html?Dist=Net-OpenID-Server

If you know someone who might be using Net::OpenID::Consumer or
Net::OpenID::Server, please let them know as I'm very eager to not break
things for anyone (yet). I'll shortly post to the OpenID list, PerlMonks and
Planet Perl Iron Man. Hopefully that'll catch everyone!

Cheers,
Rob.