From 317d2f1055ed692609916851a0f1f6415ff420a1 Mon Sep 17 00:00:00 2001 From: André Fabian Silva Delgado Date: Tue, 30 Jun 2015 06:03:32 -0300 Subject: xchat-2.8.8-15.parabola1: rebuild against perl 5.22, add TLS v1.0+ support (FS#44021 -> https://bugs.archlinux.org/task/44021) --- libre/xchat/xchat-sslv23.patch | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 libre/xchat/xchat-sslv23.patch (limited to 'libre/xchat/xchat-sslv23.patch') diff --git a/libre/xchat/xchat-sslv23.patch b/libre/xchat/xchat-sslv23.patch new file mode 100644 index 000000000..fc8f02e97 --- /dev/null +++ b/libre/xchat/xchat-sslv23.patch @@ -0,0 +1,22 @@ +--- a/src/common/ssl.c ++++ b/src/common/ssl.c +@@ -70,8 +70,9 @@ + + SSLeay_add_ssl_algorithms (); + SSL_load_error_strings (); +- ctx = SSL_CTX_new (server ? SSLv3_server_method() : SSLv3_client_method ()); ++ ctx = SSL_CTX_new (server ? SSLv23_server_method() : SSLv23_client_method ()); + ++ SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3); + SSL_CTX_set_session_cache_mode (ctx, SSL_SESS_CACHE_BOTH); + SSL_CTX_set_timeout (ctx, 300); + +@@ -281,7 +282,7 @@ + __SSL_critical_error ("SSL_new"); + + SSL_set_fd (ssl, sd); +- if (ctx->method == SSLv3_client_method()) ++ if (ctx->method == SSLv23_client_method()) + SSL_set_connect_state (ssl); + else + SSL_set_accept_state(ssl); -- cgit v1.2.3