Attachment 165517 Details for Bug 203701 – Disables flawed SSL protocols

[patch] Disables flawed SSL protocols

webjob-2016-01-13-1303.diff (text/plain), 2.98 KB, created by klm on 2016-01-13 18:07:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: klm

Created: 2016-01-13 18:07:24 UTC

Size: 2.98 KB

patch

obsolete

>Index: files/patch-src__ssl.c
>===================================================================
>--- files/patch-src__ssl.c	(revision 0)
>+++ files/patch-src__ssl.c	(working copy)
>@@ -0,0 +1,37 @@
>+diff -urN webjob-1.9.0.old/src/ssl.c webjob-1.9.0.new/src/ssl.c
>+--- src/ssl.c	2012-01-07 02:56:14.000000000 -0500
>++++ src/ssl.c	2016-01-13 11:23:02.096297912 -0500
>+@@ -241,7 +241,7 @@
>+    *
>+    *********************************************************************
>+    */
>+-  psProperties->psslCTX = SSL_CTX_new(SSLv3_client_method());
>++  psProperties->psslCTX = SSL_CTX_new(SSLv23_client_method());
>+   if (psProperties->psslCTX == NULL)
>+   {
>+     ERR_error_string(ERR_get_error(), acLocalError);
>+@@ -252,6 +252,24 @@
>+   /*-
>+    *********************************************************************
>+    *
>++   * Disable protocol versions that are no longer safe to use.
>++   *
>++   *********************************************************************
>++   */
>++  SSL_CTX_set_options
>++  (
>++    psProperties->psslCTX,
>++    (
>++        SSL_OP_NO_SSLv2
>++      | SSL_OP_NO_SSLv3
>++      | SSL_OP_NO_TLSv1
>++      | SSL_OP_NO_TLSv1_1
>++    )
>++  );
>++
>++  /*-
>++   *********************************************************************
>++   *
>+    * Setup SSL certificate verification. Load the bundled certificate
>+    * authorities file. A common name (CN) and a positive chain length
>+    * must be specified to activate PEER verification. If you want to
>Index: files/patch-tools__webjob-dsvtool__ssl.c
>===================================================================
>--- files/patch-tools__webjob-dsvtool__ssl.c	(revision 0)
>+++ files/patch-tools__webjob-dsvtool__ssl.c	(working copy)
>@@ -0,0 +1,37 @@
>+diff -urN webjob-1.9.0.old/tools/webjob-dsvtool/ssl.c webjob-1.9.0.new/tools/webjob-dsvtool/ssl.c
>+--- tools/webjob-dsvtool/ssl.c	2012-01-07 02:56:14.000000000 -0500
>++++ tools/webjob-dsvtool/ssl.c	2016-01-13 11:29:48.274246265 -0500
>+@@ -241,7 +241,7 @@
>+    *
>+    *********************************************************************
>+    */
>+-  psProperties->psslCTX = SSL_CTX_new(SSLv3_client_method());
>++  psProperties->psslCTX = SSL_CTX_new(SSLv23_client_method());
>+   if (psProperties->psslCTX == NULL)
>+   {
>+     ERR_error_string(ERR_get_error(), acLocalError);
>+@@ -252,6 +252,24 @@
>+   /*-
>+    *********************************************************************
>+    *
>++   * Disable protocol versions that are no longer safe to use.
>++   *
>++   *********************************************************************
>++   */
>++  SSL_CTX_set_options
>++  (
>++    psProperties->psslCTX,
>++    (
>++        SSL_OP_NO_SSLv2
>++      | SSL_OP_NO_SSLv3
>++      | SSL_OP_NO_TLSv1
>++      | SSL_OP_NO_TLSv1_1
>++    )
>++  );
>++
>++  /*-
>++   *********************************************************************
>++   *
>+    * Setup SSL certificate verification. Load the bundled certificate
>+    * authorities file. A common name (CN) and a positive chain length
>+    * must be specified to activate PEER verification. If you want to

Actions: View | Diff

Attachments on bug 203701: 161914 | 161915 | 165517 | 165527 | 165531