Hi!

Here is an update to sieve-connect. This includes a security fix:

"Fix TLS verification"
"* TLS hostname verification was not actually happening."
        / sieve-connect.ChangeLog.txt /


Daniel



Index: Makefile
===================================================================
RCS file: /cvs/ports/mail/sieve-connect/Makefile,v
retrieving revision 1.5
diff -p -u -r1.5 Makefile
--- Makefile    11 Mar 2013 11:23:53 -0000      1.5
+++ Makefile    16 Apr 2013 08:12:07 -0000
@@ -2,7 +2,7 @@
 
 COMMENT =      perl sieveshell-compatible ManageSieve client
 
-DISTNAME =     sieve-connect-0.84
+DISTNAME =     sieve-connect-0.85
 CATEGORIES =   mail
 PKG_ARCH =     *
 
Index: distinfo
===================================================================
RCS file: /cvs/ports/mail/sieve-connect/distinfo,v
retrieving revision 1.4
diff -p -u -r1.4 distinfo
--- distinfo    29 Nov 2012 09:45:20 -0000      1.4
+++ distinfo    16 Apr 2013 08:12:07 -0000
@@ -1,2 +1,2 @@
-SHA256 (sieve-connect-0.84.tar.bz2) = 
PNowxPf7vjM5od2TTJiTFeWgDDLqIDSU1cja53o2+kc=
-SIZE (sieve-connect-0.84.tar.bz2) = 31737
+SHA256 (sieve-connect-0.85.tar.bz2) = 
TU4+7IgatF9SsiddrekEeNemtHlCaV77KSJ9FTiknn8=
+SIZE (sieve-connect-0.85.tar.bz2) = 34323
Index: patches/patch-sieve-connect_pl
===================================================================
RCS file: /cvs/ports/mail/sieve-connect/patches/patch-sieve-connect_pl,v
retrieving revision 1.1
diff -p -u -r1.1 patch-sieve-connect_pl
--- patches/patch-sieve-connect_pl      2 Apr 2011 14:31:42 -0000       1.1
+++ patches/patch-sieve-connect_pl      16 Apr 2013 08:12:07 -0000
@@ -1,10 +1,10 @@
 $OpenBSD: patch-sieve-connect_pl,v 1.1 2011/04/02 14:31:42 sthen Exp $
---- sieve-connect.pl.orig      Sat Apr  2 07:13:57 2011
-+++ sieve-connect.pl   Sat Apr  2 08:57:18 2011
-@@ -44,7 +44,7 @@
-       SSL_version     => 'TLSv1',
+--- sieve-connect.pl.orig      Tue Apr 16 10:07:35 2013
++++ sieve-connect.pl   Tue Apr 16 10:07:38 2013
+@@ -47,7 +47,7 @@ my %ssl_options = (
+       SSL_version     => 'SSLv23:!SSLv2:!SSLv3',
        SSL_cipher_list => 'ALL:!aNULL:!NULL:!LOW:!EXP:!ADH:@STRENGTH',
-       SSL_verify_mode => 0x01,
+       SSL_verify_mode => 0x03,
 -      SSL_ca_path     => '/etc/ssl/certs',
 +      SSL_ca_file     => '/etc/ssl/cert.pem',
  );



-- 
LÉVAI Dániel
PGP key ID = 0x83B63A8F
Key fingerprint = DBEC C66B A47A DFA2 792D  650C C69B BE4C 83B6 3A8F

Reply via email to