commit:     f520f42c189ee5fa4cf20f9e6eaa22eb4e77f069
Author:     Thomas Deutschmann <whissi <AT> gentoo <DOT> org>
AuthorDate: Sat Feb 23 16:21:57 2019 +0000
Commit:     Thomas Deutschmann <whissi <AT> gentoo <DOT> org>
CommitDate: Sat Feb 23 16:22:11 2019 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f520f42c

net-ftp/pure-ftpd: disable TLSv1.1

Package-Manager: Portage-2.3.62, Repoman-2.3.12
Signed-off-by: Thomas Deutschmann <whissi <AT> gentoo.org>

 .../files/pure-ftpd-1.0.47-disable-TLSv1.1.patch   | 22 ++++++++++++++++++++++
 net-ftp/pure-ftpd/pure-ftpd-1.0.47-r4.ebuild       |  1 +
 2 files changed, 23 insertions(+)

diff --git a/net-ftp/pure-ftpd/files/pure-ftpd-1.0.47-disable-TLSv1.1.patch 
b/net-ftp/pure-ftpd/files/pure-ftpd-1.0.47-disable-TLSv1.1.patch
new file mode 100644
index 00000000000..cd4532bb97a
--- /dev/null
+++ b/net-ftp/pure-ftpd/files/pure-ftpd-1.0.47-disable-TLSv1.1.patch
@@ -0,0 +1,22 @@
+From aa68b2d620ef0c83c7f52213c7e6093722b0b8bd Mon Sep 17 00:00:00 2001
+From: Frank Denis <[email protected]>
+Date: Wed, 24 Oct 2018 19:19:26 +0200
+Subject: [PATCH] Disable TLSv1_1
+
+---
+ src/tls.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/tls.c b/src/tls.c
+index f383ed9..c4e2a1b 100644
+--- a/src/tls.c
++++ b/src/tls.c
+@@ -297,7 +297,7 @@ int tls_init_library(void)
+     SSL_CTX_set_options(tls_ctx, SSL_OP_NO_TLSv1);
+ # endif
+ # ifdef SSL_OP_NO_TLSv1_1
+-    SSL_CTX_clear_options(tls_ctx, SSL_OP_NO_TLSv1_1);
++    SSL_CTX_set_options(tls_ctx, SSL_OP_NO_TLSv1_1);
+ # endif
+ # ifdef SSL_OP_NO_TLSv1_2
+     SSL_CTX_clear_options(tls_ctx, SSL_OP_NO_TLSv1_2);

diff --git a/net-ftp/pure-ftpd/pure-ftpd-1.0.47-r4.ebuild 
b/net-ftp/pure-ftpd/pure-ftpd-1.0.47-r4.ebuild
index 48506572446..7091bdd479e 100644
--- a/net-ftp/pure-ftpd/pure-ftpd-1.0.47-r4.ebuild
+++ b/net-ftp/pure-ftpd/pure-ftpd-1.0.47-r4.ebuild
@@ -45,6 +45,7 @@ PATCHES=(
        "${FILESDIR}/${PN}-1.0.47-MAX_DATA_SIZE.patch"
        "${FILESDIR}/${PN}-1.0.47-TLSv1.3.patch"
        "${FILESDIR}/${PN}-1.0.47-disable-TLSv1.3.patch"
+       "${FILESDIR}/${PN}-1.0.47-disable-TLSv1.1.patch"
 )
 
 src_configure() {

Reply via email to