[CVE-2024-45321] generate: hotpatch bin/cpanm to use HTTPS endpoints

[stigtsp]

This commit patches out insecure http endpoints from the fatpacked bin/cpanm executable

Tested with:

• cpanm [email protected] (backpan)
• cpanm Crypt::[email protected] (TRIAL)
• cpanm Mojolicious

Cc: @zakame @dgl @garu

[stigtsp]

Refs:

• Securing Perl: cpanm HTTPS + verify_SSL + verify signatures? miyagawa/cpanminus#611
• make cpanm secure by default miyagawa/cpanminus#674

[zakame]

Hi @stigtsp, thanks for this PR!

Do you think its also worth expanding

docker-perl/.github/workflows/build-image.yml

Lines 57 to 65 in 09d0e7d

	run: |
	dir='${{ matrix.directory }}'
	img="perl:${dir//,/-}"
	docker run "$img" perl -MHTTP::Tiny -E 'if (HTTP::Tiny->new->get("https://github.com")->{status} == 200) { exit 0 } exit 1'
	- name: Run cpanm install test
	run: |
	dir='${{ matrix.directory }}'
	img="perl:${dir//,/-}"
	docker run "$img" cpanm -v Mojolicious

to include the cpanm module tests you mentioned? If so, I can follow that that up with a later PR - am planning to include this in the upcoming perldevel-5.41.3 update...

[stigtsp]

Do you think its also worth expanding [..]

Sounds reasonable, but I'm not familiar with the tests for the docker image :)

[zakame]

@stigtsp added tests now, though had to forego on slim and choose other modules to avoid having to install additional dependencies on main. Thanks again!

[zakame]

This is now applied in perl:5.41.3 and rebuilds of 5.40.0/5.38.2/5.36.3. Thanks again! 🙇