components/irssi/patches/01-ssl.patch
author saurabh.vyas@oracle.com
Wed, 27 Jan 2016 09:13:52 -0800
changeset 5350 0bd2e97a57c6
parent 5225 d3c7046a4000
child 5931 79be2389471d
permissions -rw-r--r--
22599480 move mcollective to Ruby 2.1 22599526 move stomp to Ruby 2.1

# Disable SSLv2, SSLv3, and TLSv1.
# Upstream has disabled SSLv2 and SSLv3. Disabling of TLSv1 will not go upstream

--- irssi-0.8.15/src/core/network-openssl.c.orig	Wed Dec 16 10:30:52 2015
+++ irssi-0.8.15/src/core/network-openssl.c	Wed Dec 16 10:30:27 2015
@@ -406,6 +406,7 @@
 		g_error("Could not allocate memory for SSL context");
 		return NULL;
 	}
+	SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_NO_TLSv1);
 
 	if (mycert && *mycert) {
 		char *scert = NULL, *spkey = NULL;