ports/security/ftimes/files/patch-src__ssl.c
Bernard Spil 3df8327d98 security/ftimes: Fix build without SSLv3 methods
- Use SSLv23 methods and SSL_OP_NO_SSL3

PR:		203693
Sponsored by:	BSDCan DevSummit
2016-06-12 18:28:19 +00:00

46 lines
1.3 KiB
C

diff -urN ftimes-3.11.0.old/src/ssl.c ftimes-3.11.0.new/src/ssl.c
--- src/ssl.c 2014-07-18 02:40:44.000000000 -0400
+++ src/ssl.c 2016-01-13 17:18:29.073028573 -0500
@@ -251,7 +251,7 @@
*
*********************************************************************
*/
- psProperties->psslCTX = SSL_CTX_new(SSLv3_client_method());
+ psProperties->psslCTX = SSL_CTX_new(SSLv23_client_method());
if (psProperties->psslCTX == NULL)
{
ERR_error_string(ERR_get_error(), acLocalError);
@@ -262,6 +262,33 @@
/*-
*********************************************************************
*
+ * Disable protocol versions that are no longer safe to use.
+ *
+ *********************************************************************
+ */
+ SSL_CTX_set_options
+ (
+ psProperties->psslCTX,
+ (
+ 0
+#ifdef SSL_OP_NO_SSLv2
+ | SSL_OP_NO_SSLv2
+#endif
+#ifdef SSL_OP_NO_SSLv3
+ | SSL_OP_NO_SSLv3
+#endif
+#ifdef SSL_OP_NO_TLSv1
+ | SSL_OP_NO_TLSv1
+#endif
+#ifdef SSL_OP_NO_TLSv1_1
+ | SSL_OP_NO_TLSv1_1
+#endif
+ )
+ );
+
+ /*-
+ *********************************************************************
+ *
* Setup SSL certificate verification. Load the bundled certificate
* authorities file. A common name (CN) and a positive chain length
* must be specified to activate PEER verification. If you want to