From 43a61b5a48c2e405e9bb7d8cac70200324b8fff5 Mon Sep 17 00:00:00 2001 From: CyberLeo Date: Thu, 6 Nov 2014 19:44:07 -0600 Subject: [PATCH] www/pound: patch to disable SSLv2 and SSLv3 --- cdn/ports/www/pound/files/patch-disable_sslv23.patch | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 cdn/ports/www/pound/files/patch-disable_sslv23.patch diff --git a/cdn/ports/www/pound/files/patch-disable_sslv23.patch b/cdn/ports/www/pound/files/patch-disable_sslv23.patch new file mode 100644 index 0000000..4a89326 --- /dev/null +++ b/cdn/ports/www/pound/files/patch-disable_sslv23.patch @@ -0,0 +1,11 @@ +--- config.c.orig 2011-12-28 13:57:45 UTC ++++ config.c +@@ -1111,6 +1111,8 @@ + SSL_CTX_set_session_id_context(pc->ctx, (unsigned char *)lin, strlen(lin)); + SSL_CTX_set_tmp_rsa_callback(pc->ctx, RSA_tmp_callback); + SSL_CTX_set_tmp_dh_callback(pc->ctx, DH_tmp_callback); ++ SSL_CTX_set_options(pc->ctx, SSL_OP_NO_SSLv3); ++ SSL_CTX_set_options(pc->ctx, SSL_OP_NO_SSLv2); + } + return res; + } else { -- 2.42.0