mirror of
https://git.freebsd.org/ports.git
synced 2025-04-29 10:06:40 -04:00
22 lines
972 B
C
22 lines
972 B
C
--- imap/tls.c.orig 2018-04-30 02:05:44 UTC
|
|
+++ imap/tls.c
|
|
@@ -734,7 +734,9 @@ EXPORTED int tls_init_serverengine(c
|
|
off |= SSL_OP_ALL; /* Work around all known bugs */
|
|
off |= SSL_OP_NO_SSLv2; /* Disable insecure SSLv2 */
|
|
off |= SSL_OP_NO_SSLv3; /* Disable insecure SSLv3 */
|
|
+#if defined(SSL_OP_NO_COMPRESSION)
|
|
off |= SSL_OP_NO_COMPRESSION; /* Disable TLS compression */
|
|
+#endif
|
|
|
|
const char *tls_versions = config_getstring(IMAPOPT_TLS_VERSIONS);
|
|
|
|
@@ -1465,7 +1467,9 @@ HIDDEN int tls_init_clientengine(int ver
|
|
off |= SSL_OP_ALL; /* Work around all known bugs */
|
|
off |= SSL_OP_NO_SSLv2; /* Disable insecure SSLv2 */
|
|
off |= SSL_OP_NO_SSLv3; /* Disable insecure SSLv3 */
|
|
+#if defined(SSL_OP_NO_COMPRESSION)
|
|
off |= SSL_OP_NO_COMPRESSION; /* Disable TLS compression */
|
|
+#endif
|
|
|
|
SSL_CTX_set_options(c_ctx, off);
|
|
SSL_CTX_set_info_callback(c_ctx, apps_ssl_info_callback);
|