svn commit: r381622 - in head/mail/dovecot: . files

[Bryan Drewery]

Author: bdrewery
Date: Thu Mar 19 17:04:07 2015
New Revision: 381622
URL: https://svnweb.freebsd.org/changeset/ports/381622
QAT: https://qat.redports.org/buildarchive/r381622/

Log:
  Disable SSLv2 and SSLv3.
  
  PR:		197027
  Submitted by:	Kai Gallasch <k at free.de>
  MFH:		2015Q1

Added:
  head/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c   (contents, props changed)
Modified:
  head/mail/dovecot/Makefile

Modified: head/mail/dovecot/Makefile
==============================================================================
--- head/mail/dovecot/Makefile	Thu Mar 19 17:03:33 2015	(r381621)
+++ head/mail/dovecot/Makefile	Thu Mar 19 17:04:07 2015	(r381622)
@@ -3,7 +3,7 @@
 
 PORTNAME=	dovecot
 PORTVERSION=	1.2.17
-PORTREVISION=	5
+PORTREVISION=	6
 CATEGORIES=	mail ipv6
 MASTER_SITES=	http://www.dovecot.org/releases/${PORTVERSION:R}/ \
 		http://www.rename-it.nl/dovecot/${PORTVERSION:R}/

Added: head/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c	Thu Mar 19 17:04:07 2015	(r381622)
@@ -0,0 +1,11 @@
+--- src/login-common/ssl-proxy-openssl.c.orig	2015-03-19 11:57:04.578367000 -0500
++++ src/login-common/ssl-proxy-openssl.c	2015-03-19 11:57:21.859436000 -0500
+@@ -818,7 +818,7 @@ static void ssl_proxy_ctx_init(SSL_CTX *
+ {
+ 	const char *cafile;
+ 
+-	SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL);
++	SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3);
+ 
+ 	cafile = getenv("SSL_CA_FILE");
+ 	if (cafile != NULL) {