--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/components/slrn/patches/sslv3-fix.patch Thu Jun 04 14:00:42 2015 -0700
@@ -0,0 +1,15 @@
+ This is an in-house patch that disables SSLv2 and SSLv3 protocol for
+ slrn. This change was sent upstream and will be incorporated into the
+ future release of version 1.0.3.
+
+diff -rupN slrn-0.9.9p1-orig/sltcp.c slrn-0.9.9p1/sltcp.c
+--- slrn-0.9.9p1-orig/src/sltcp.c 2015-06-04 12:45:59.330874707 -0700
++++ slrn-0.9.9p1/src/sltcp.c 2015-06-04 12:46:38.175640243 -0700
+@@ -572,6 +572,7 @@ static SSL *alloc_ssl (void)
+ print_error (_("SSL_CTX_new failed.\n"));
+ return NULL;
+ }
++ SSL_CTX_set_options (c, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);
+ This_SSL_Ctx = c;
+ atexit (deinit_ssl);
+