diff options
| author |   Doug Goldstein <cardoe@gentoo.org> | 2008-03-25 00:27:16 +0000 |
|---|---|---|
| committer | Doug Goldstein <cardoe@gentoo.org> | 2008-03-25 00:27:16 +0000 |
| commit | a82931a9be766f27ca607d0be7f64e40ab97d2d0 (patch) | |
| tree | 583d362be9f1cd452edac3c55822f0f3d26f2461 /dev-libs/openssl/files | |
| parent | get the list of services from the default boot runlevel rather than maintaini... (diff) | |
| download | gentoo-2-a82931a9be766f27ca607d0be7f64e40ab97d2d0.tar.gz gentoo-2-a82931a9be766f27ca607d0be7f64e40ab97d2d0.tar.bz2 gentoo-2-a82931a9be766f27ca607d0be7f64e40ab97d2d0.zip | |
Patch from OpenSSL's bug tracker not to send TLS Extensions on SSLv3 only connections, while not explicitly against the SSL spec, several SSL implementations can not handle it. Patch by Kaspar Brand <ossl-rt@velox.ch> from http://rt.openssl.org/Ticket/Display.html?id=1629. Resolves bug #198914
(Portage version: 2.1.4.4)
Diffstat (limited to 'dev-libs/openssl/files')
| -rw-r--r-- | dev-libs/openssl/files/openssl-0.9.8g-sslv3-no-tlsext.patch | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/dev-libs/openssl/files/openssl-0.9.8g-sslv3-no-tlsext.patch b/dev-libs/openssl/files/openssl-0.9.8g-sslv3-no-tlsext.patch new file mode 100644 index 000000000000..4c3cd06f16eb --- /dev/null +++ b/dev-libs/openssl/files/openssl-0.9.8g-sslv3-no-tlsext.patch @@ -0,0 +1,28 @@ +ndex: ssl/t1_lib.c +=================================================================== +RCS file: /home/ossl-cvs/openssl/ssl/t1_lib.c,v +retrieving revision 1.51 +diff -p -u -r1.51 t1_lib.c +--- ssl/t1_lib.c 26 Oct 2007 12:06:35 -0000 1.51 ++++ ssl/t1_lib.c 26 Feb 2008 18:02:50 -0000 +@@ -267,6 +267,10 @@ unsigned char *ssl_add_clienthello_tlsex + int extdatalen=0; + unsigned char *ret = p; + ++ /* don't add extensions for SSLv3 */ ++ if (s->client_version == SSL3_VERSION) ++ return p; ++ + ret+=2; + + if (ret>=limit) return NULL; /* this really never occurs, but ... */ +@@ -448,6 +452,10 @@ unsigned char *ssl_add_serverhello_tlsex + int extdatalen=0; + unsigned char *ret = p; + ++ /* don't add extensions for SSLv3 */ ++ if (s->version == SSL3_VERSION) ++ return p; ++ + ret+=2; + if (ret>=limit) return NULL; /* this really never occurs, but ... */ |