From 620f73c89d2d89f5db77e4985d098037a1a4c482 Mon Sep 17 00:00:00 2001
From: André Fabian Silva Delgado <emulatorman@parabola.nu>
Date: Sat, 17 Jan 2015 07:08:56 -0200
Subject: icecat-31.2.0-3: disable the least secure encryption protocols

---
 libre/icecat/PKGBUILD  | 24 ++++++++++++------------
 libre/icecat/vendor.js |  9 +++++++++
 2 files changed, 21 insertions(+), 12 deletions(-)

(limited to 'libre/icecat')

diff --git a/libre/icecat/PKGBUILD b/libre/icecat/PKGBUILD
index df48bce04..1df3561d1 100644
--- a/libre/icecat/PKGBUILD
+++ b/libre/icecat/PKGBUILD
@@ -14,7 +14,7 @@ _pgo=true
 
 pkgname=icecat
 pkgver=31.2.0
-pkgrel=2
+pkgrel=3
 
 pkgdesc="GNU IceCat, the standalone web browser based on Mozilla Firefox."
 arch=(i686 x86_64 mips64el)
@@ -42,17 +42,17 @@ source=("http://ftp.gnu.org/gnu/gnuzilla/$pkgver/$pkgname-$pkgver.tar.xz"
         rhbz-966424.patch
         $pkgname-fixed-loading-icon.png
         devtools-appmanager.patch)
-md5sums=('52f310b515cf185636e889d55f9d615d'
-         '6674e0f2468787444c0a0a3e5da22934'
-         'df08eaa1ac3bc6c2356be4fbf8ec8932'
-         '15e9b24deb5d09b359691658db7f3fd2'
-         'b03a979a78484503ba8dddad4f2c96d1'
-         '936eeb4cadad656528c87b963a689583'
-         '7b2213f23f7dec017f67257b9fd2780f'
-         'afafa89b727642c33ade82f2ffbe64a7'
-         '16a112aaeee34ff3cae1fc1a521448a0'
-         '6e335a517c68488941340ee1c23f97b0'
-         'e2048a522e989e3c7da1674d4a6ffca0')
+sha256sums=('b0c532e7b768230b66e5fb43bebfe300c344842806db088ee0467cc01c9d290b'
+            'e0779596c2aafa0f77f09094a218940b1dc5120cd6425d4ea1e8c96be44711ff'
+            '92d7ea9feb8d2814d1abaf5cf4012983a2fb9cc56b26a5d7c7c3898aedf06fb4'
+            'b993969d075bce1a8021719347dbbad79f0adc0dc9c549efe4948806253c1882'
+            '93e3001ce152e1d142619e215a9ef07dd429943b99d21726c25da9ceb31e31cd'
+            'c2c636fc65e7f6506a7305b930ad403100bc0b51401bd7d6567b48df3654f82e'
+            '5bdab2de5520fb4d3dbc453d9f73d20e0e077bf652bc780fc17184ba6c718a47'
+            '228b35a740dc13533bdf00dcf478076ef05b181d017f30e7f75cd3976f763548'
+            'd25c6e95d20ec622a51346897d986fdd97074023d6a02bee0533773a195f8233'
+            '68e3a5b47c6d175cc95b98b069a15205f027cab83af9e075818d38610feb6213'
+            '2de82fc3d651362f06c2ec4a30d504198732bb54602a5d81c35159767ce40195')
 
 prepare() {
   export GNU_BUILD="gnuzilla-release"
diff --git a/libre/icecat/vendor.js b/libre/icecat/vendor.js
index 5b384fff6..7762db0dd 100644
--- a/libre/icecat/vendor.js
+++ b/libre/icecat/vendor.js
@@ -27,3 +27,12 @@ pref("geo.enabled", false);
 
 // Make sure that the request URL of the GeoLocation backend is empty
 pref("geo.wifi.uri", "");
+
+// Disable the least secure encryption protocols
+pref("security.ssl3.ecdhe_ecdsa_rc4_128_sha", false);
+pref("security.ssl3.ecdhe_rsa_rc4_128_sha", false);
+pref("security.ssl3.rsa_rc4_128_md5", false);
+pref("security.ssl3.rsa_rc4_128_sha", false);
+pref("security.ssl3.rsa_aes_128_sha", false);
+pref("security.ssl3.rsa_aes_256_sha", false);
+pref("security.ssl3.rsa_des_ede3_sha", false);
-- 
cgit v1.2.3