svn commit: r381623 - in branches/2015Q1/mail/dovecot: . files

[Bryan Drewery]

Author: bdrewery
Date: Thu Mar 19 17:04:38 2015
New Revision: 381623
URL: https://svnweb.freebsd.org/changeset/ports/381623
QAT: https://qat.redports.org/buildarchive/r381623/

Log:
  MFH: r381622
  
  Disable SSLv2 and SSLv3.
  
  PR:		197027
  Submitted by:	Kai Gallasch <k at free.de>

Added:
  branches/2015Q1/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c
     - copied unchanged from r381622, head/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c
Modified:
  branches/2015Q1/mail/dovecot/Makefile
Directory Properties:
  branches/2015Q1/   (props changed)

Modified: branches/2015Q1/mail/dovecot/Makefile
==============================================================================
--- branches/2015Q1/mail/dovecot/Makefile	Thu Mar 19 17:04:07 2015	(r381622)
+++ branches/2015Q1/mail/dovecot/Makefile	Thu Mar 19 17:04:38 2015	(r381623)
@@ -3,7 +3,7 @@
 
 PORTNAME=	dovecot
 PORTVERSION=	1.2.17
-PORTREVISION=	5
+PORTREVISION=	6
 CATEGORIES=	mail ipv6
 MASTER_SITES=	http://www.dovecot.org/releases/${PORTVERSION:R}/ \
 		http://www.rename-it.nl/dovecot/${PORTVERSION:R}/

Copied: branches/2015Q1/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c (from r381622, head/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c)
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ branches/2015Q1/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c	Thu Mar 19 17:04:38 2015	(r381623, copy of r381622, head/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c)
@@ -0,0 +1,11 @@
+--- src/login-common/ssl-proxy-openssl.c.orig	2015-03-19 11:57:04.578367000 -0500
++++ src/login-common/ssl-proxy-openssl.c	2015-03-19 11:57:21.859436000 -0500
+@@ -818,7 +818,7 @@ static void ssl_proxy_ctx_init(SSL_CTX *
+ {
+ 	const char *cafile;
+ 
+-	SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL);
++	SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3);
+ 
+ 	cafile = getenv("SSL_CA_FILE");
+ 	if (cafile != NULL) {