summaryrefslogtreecommitdiff
path: root/libre/iceweasel
diff options
context:
space:
mode:
authorAndré Fabian Silva Delgado <emulatorman@parabola.nu>2015-10-29 13:56:14 -0300
committerAndré Fabian Silva Delgado <emulatorman@parabola.nu>2015-10-29 15:20:35 -0300
commit30c46f99436701ca4d9f9f8aefb452115cf4efc9 (patch)
tree80a707e8ec1a0a29153804a2798d6461a8c1375d /libre/iceweasel
parentf08677aa66448da95307758466db472d20667e00 (diff)
downloadabslibre-30c46f99436701ca4d9f9f8aefb452115cf4efc9.tar.gz
abslibre-30c46f99436701ca4d9f9f8aefb452115cf4efc9.tar.bz2
abslibre-30c46f99436701ca4d9f9f8aefb452115cf4efc9.zip
iceweasel-1:41.0.2.deb1-3: disable general crypto hardening settings for now
* fix connection to HTTPS Parabola website -> https://lists.parabola.nu/pipermail/assist/2015-October/000534.html * fix bug #842 -> https://labs.parabola.nu/issues/842
Diffstat (limited to 'libre/iceweasel')
-rw-r--r--libre/iceweasel/PKGBUILD4
-rw-r--r--libre/iceweasel/vendor.js16
2 files changed, 10 insertions, 10 deletions
diff --git a/libre/iceweasel/PKGBUILD b/libre/iceweasel/PKGBUILD
index cc105faf4..d8e223aef 100644
--- a/libre/iceweasel/PKGBUILD
+++ b/libre/iceweasel/PKGBUILD
@@ -24,7 +24,7 @@ debfile() { echo $@|sed -r 's@(.).*@\1/&/&@'; }
pkgname=iceweasel
epoch=1
pkgver=$_debver.$_debrel
-pkgrel=2
+pkgrel=3
pkgdesc="A libre version of Debian Iceweasel, the standalone web browser based on Mozilla Firefox."
arch=(i686 x86_64)
@@ -61,7 +61,7 @@ sha256sums=('707d44ac9a73868c5f2fe1832945ae66b297a8b7eaee3d45a43ab767fe9447cc'
'56eba484179c7f498076f8dc603d8795e99dce8c6ea1da9736318c59d666bff6'
'2257dc69886bd0b72c48675a27c3a88b9cf6b598252c9e9f1c99763180684fc3'
'3aea6676f1e53a09673b6ae219d281fc28054beb6002b09973611c02f827651d'
- '481781aa1b4da21e58cbe88df2ca992250bf7a7cf7c79022393e4ba974fecaca'
+ '34ae0353976538eaefd109d36a769a03cde3447d662f366b0a7b2b3a6c054e54'
'68e3a5b47c6d175cc95b98b069a15205f027cab83af9e075818d38610feb6213')
prepare() {
diff --git a/libre/iceweasel/vendor.js b/libre/iceweasel/vendor.js
index b9386b559..d504c5706 100644
--- a/libre/iceweasel/vendor.js
+++ b/libre/iceweasel/vendor.js
@@ -123,14 +123,14 @@ pref("network.http.speculative-parallel-limit", 0);
// Crypto hardening
// https://gist.github.com/haasn/69e19fc2fe0e25f3cff5
//General settings
-pref("security.tls.unrestricted_rc4_fallback", false);
-pref("security.tls.insecure_fallback_hosts.use_static_list", false);
-pref("security.tls.version.min", 1);
-pref("security.ssl.require_safe_negotiation", true);
-pref("security.ssl.treat_unsafe_negotiation_as_broken", true);
-pref("security.ssl3.rsa_seed_sha", true);
-pref("security.OCSP.enabled", 1);
-pref("security.OCSP.require", true);
+//pref("security.tls.unrestricted_rc4_fallback", false);
+//pref("security.tls.insecure_fallback_hosts.use_static_list", false);
+//pref("security.tls.version.min", 1);
+//pref("security.ssl.require_safe_negotiation", true);
+//pref("security.ssl.treat_unsafe_negotiation_as_broken", true);
+//pref("security.ssl3.rsa_seed_sha", true);
+//pref("security.OCSP.enabled", 1);
+//pref("security.OCSP.require", true);
//Disable unnecessary protocols
pref("security.ssl3.rsa_rc4_128_sha", false);
pref("security.ssl3.rsa_rc4_128_md5", false);