Home Explore Help
Register Sign In
pi31415
/
librecmc-package-feed
forked from libreCMC/package-feed
1
0
Fork 0
Files
Tree: 9f5db9a6db
Branches Tags
librecmc-packag...
/
lang
/
lua-openssl
/
patches
/
0020-support-OPENSSL_NO_SSL3_METHOD.patch

0020-support-OPENSSL_NO_SSL3_METHOD.patch 1.7 KB
History Raw

1234567891011121314151617181920212223242526272829303132333435363738394041 
  1. --- lua-openssl-0.6.0.old/src/ssl.c	2016-09-19 08:30:43.735075695 +0200
    2. 

  2. +++ lua-openssl-0.6.0/src/ssl.c	2016-09-19 09:02:45.733813437 +0200
    3. 

  3. @@ -24,12 +24,17 @@
    4. 

  4.    SSL_METHOD* method = NULL;
    5. 

  5.    const char* ciphers;
    6. 

  6.    SSL_CTX* ctx;
    7. 

  7. -  if (strcmp(meth, "SSLv3") == 0)
    8. 

  8. +  if (0);
    9. 

  9. +
    10. 

  10. +#ifndef OPENSSL_NO_SSL3
    11. 

  11. +  else if (strcmp(meth, "SSLv3") == 0)
    12. 

  12.      method = SSLv3_method();    /* SSLv3 */
    13. 

  13.    else if (strcmp(meth, "SSLv3_server") == 0)
    14. 

  14.      method = SSLv3_server_method(); /* SSLv3 */
    15. 

  15.    else if (strcmp(meth, "SSLv3_client") == 0)
    16. 

  16.      method = SSLv3_client_method(); /* SSLv3 */
    17. 

  17. +#endif
    18. 

  18. +
    19. 

  19.    else if (strcmp(meth, "SSLv23") == 0)
    20. 

  20.      method = SSLv23_method();   /* SSLv3 but can rollback to v2 */
    21. 

  21.    else if (strcmp(meth, "SSLv23_server") == 0)
    22. 

  22. @@ -79,15 +84,15 @@
    23. 

  23.  #endif
    24. 

  24.    else
    25. 

  25.      luaL_error(L, "#1:%s not supported\n"
    26. 

  26. -               "Maybe SSLv3 SSLv23 TLSv1 TLSv1_1 TLSv1_2 DTLSv1 [SSLv2], option followed by _client or _server\n",
    27. 

  27. -               "default is SSLv3",
    28. 

  28. +               "Maybe [SSLv3] SSLv23 TLSv1 TLSv1_1 TLSv1_2 DTLSv1 [SSLv2], option followed by _client or _server\n",
    29. 

  29. +               "default is TLSv1",
    30. 

  30.                 meth);
    31. 

  31.    ciphers = luaL_optstring(L, 2, SSL_DEFAULT_CIPHER_LIST);
    32. 

  32.    ctx = SSL_CTX_new(method);
    33. 

  33.    if (!ctx)
    34. 

  34.      luaL_error(L, "#1:%s not supported\n"
    35. 

  35. -               "Maybe SSLv3 SSLv23 TLSv1 TLSv1_1 TLSv1_2 DTLSv1 [SSLv2], option followed by _client or _server\n",
    36. 

  36. -               "default is SSLv3",
    37. 

  37. +               "Maybe [SSLv3] SSLv23 TLSv1 TLSv1_1 TLSv1_2 DTLSv1 [SSLv2], option followed by _client or _server\n",
    38. 

  38. +               "default is TLSv1",
    39. 

  39.                 meth);
    40. 

  40.    openssl_newvalue(L, ctx);
    41. 

  41.    SSL_CTX_set_cipher_list(ctx, ciphers);
    42.