ports/devel/gwenhywfar/files/patch-src-sio-syncio_tls.c
Tijl Coosemans 6bc6f3a9e0 - Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
  supported by libgnutls-dane and gnutls-cli.  Also clarify the option
  description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4.  Some ports used this library
  in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed.  Ports that used these have been
  updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.

net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.

www/hydra: Mark BROKEN.  This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.

PR:		207768
Exp-run by:	antoine
Approved by:	portmgr (antoine)
2016-03-27 14:57:59 +00:00

17 lines
789 B
C

--- src/sio/syncio_tls.c.orig 2014-10-12 13:12:22 UTC
+++ src/sio/syncio_tls.c
@@ -361,12 +361,10 @@ int GWEN_SyncIo_Tls_Prepare(GWEN_SYNCIO
/* possibly force protocol priority */
if (lflags & GWEN_SYNCIO_TLS_FLAGS_FORCE_SSL_V3) {
- const int proto_prio[2] = { GNUTLS_SSL3, 0 };
-
DBG_INFO(GWEN_LOGDOMAIN, "Forcing SSL v3");
- rv=gnutls_protocol_set_priority(xio->session, proto_prio);
+ rv=gnutls_priority_set_direct(xio->session, "NORMAL:-VERS-TLS-ALL:+VERS-SSL3.0", NULL);
if (rv) {
- DBG_ERROR(GWEN_LOGDOMAIN, "gnutls_protocol_set_priority: %d (%s)", rv, gnutls_strerror(rv));
+ DBG_ERROR(GWEN_LOGDOMAIN, "gnutls_priority_set_direct: %d (%s)", rv, gnutls_strerror(rv));
gnutls_deinit(xio->session);
return GWEN_ERROR_GENERIC;
}