20230829 problem in UTILITY/SLRN s11u2-sru
authorStacy Yeh <stacy.yeh@oracle.com>
Thu, 04 Jun 2015 14:00:42 -0700
branchs11u2-sru
changeset 4420 392caaf7a495
parent 4397 e26fa37faea0
child 4442 f5d31dce31a6
20230829 problem in UTILITY/SLRN
components/slrn/patches/sslv3-fix.patch
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/components/slrn/patches/sslv3-fix.patch	Thu Jun 04 14:00:42 2015 -0700
@@ -0,0 +1,15 @@
+    This is an in-house patch that disables SSLv2 and SSLv3 protocol for
+    slrn. This change was sent upstream and will be incorporated into the
+    future release of version 1.0.3.
+
+diff -rupN slrn-0.9.9p1-orig/sltcp.c slrn-0.9.9p1/sltcp.c
+--- slrn-0.9.9p1-orig/src/sltcp.c	2015-06-04 12:45:59.330874707 -0700
++++ slrn-0.9.9p1/src/sltcp.c	2015-06-04 12:46:38.175640243 -0700
+@@ -572,6 +572,7 @@ static SSL *alloc_ssl (void)
+ 	     print_error (_("SSL_CTX_new failed.\n"));
+ 	     return NULL;
+ 	  }
++	SSL_CTX_set_options (c, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);
+ 	This_SSL_Ctx = c;
+ 	atexit (deinit_ssl);
+