freebsd-ports/net/net6/files/patch-src-encrypt.cpp
Tijl Coosemans 6bc6f3a9e0 - Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
  supported by libgnutls-dane and gnutls-cli.  Also clarify the option
  description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4.  Some ports used this library
  in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed.  Ports that used these have been
  updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.

net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.

www/hydra: Mark BROKEN.  This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.

PR:		207768
Exp-run by:	antoine
Approved by:	portmgr (antoine)
2016-03-27 14:57:59 +00:00

14 lines
493 B
C++

--- src/encrypt.cpp.orig 2011-09-28 11:15:10 UTC
+++ src/encrypt.cpp
@@ -175,10 +175,7 @@ net6::tcp_encrypted_socket_base::
gnutls_session_t sess):
tcp_client_socket(cobj), session(sess), state(DEFAULT)
{
- const int kx_prio[] = { GNUTLS_KX_ANON_DH, 0 };
-
- gnutls_set_default_priority(session);
- gnutls_kx_set_priority(session, kx_prio);
+ gnutls_priority_set_direct(session, "NORMAL:-KX-ALL:+ANON-DH", NULL);
gnutls_transport_set_ptr(
session,