20230829 problem in UTILITY/SLRN s11-update
authorStacy Yeh <stacy.yeh@oracle.com>
Fri, 05 Jun 2015 10:34:15 -0700
branchs11-update
changeset 4419 ed3ddea626e3
parent 4418 7ae5fd823a4b
child 4422 785c3a06cb2f
20230829 problem in UTILITY/SLRN
components/slrn/patches/sslv3-fix.patch
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/components/slrn/patches/sslv3-fix.patch	Fri Jun 05 10:34:15 2015 -0700
@@ -0,0 +1,15 @@
+    This is an in-house patch that disables SSLv2 and SSLv3 protocol for
+    slrn. This change was sent upstream and will be incorporated into the
+    future release of version 1.0.3.
+
+diff -rupN slrn-0.9.9p1-orig/sltcp.c slrn-0.9.9p1/sltcp.c
+--- slrn-0.9.9p1-orig/src/sltcp.c	2015-06-03 14:53:33.417908879 -0700
++++ slrn-0.9.9p1/src/sltcp.c	2015-06-03 14:54:10.641613245 -0700
+@@ -572,6 +572,7 @@ static SSL *alloc_ssl (void)
+ 	     print_error (_("SSL_CTX_new failed.\n"));
+ 	     return NULL;
+ 	  }
++        SSL_CTX_set_options (c, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3);
+ 	This_SSL_Ctx = c;
+ 	atexit (deinit_ssl);
+