kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Remove SSLv2 support. Bump revision.

Browse source
This commit is contained in:
joerg 2016-03-29 22:00:13 +00:00
parent 684d7fa39c
commit 169a80a903
3 changed files with 27 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
security/openvas-client/Makefile
View file

@ -1,8 +1,8 @@
# $NetBSD: Makefile,v 1.30 2016/03/05 11:29:23 jperkin Exp $
# $NetBSD: Makefile,v 1.31 2016/03/29 22:00:13 joerg Exp $
#
DISTNAME= openvas-client-2.0.1
PKGREVISION= 25
PKGREVISION= 26
CATEGORIES= security
MASTER_SITES= http://wald.intevation.org/frs/download.php/552/

3
security/openvas-client/distinfo
View file

@ -1,7 +1,8 @@
$NetBSD: distinfo,v 1.3 2015/11/04 01:17:52 agc Exp $
$NetBSD: distinfo,v 1.4 2016/03/29 22:00:13 joerg Exp $
SHA1 (openvas-client-2.0.1.tar.gz) = 07ada2cb7538da072c27a3a1cf58f9c6152d5e64
RMD160 (openvas-client-2.0.1.tar.gz) = aa966e1e9911b63e5fee48d947cda5f0b036dd0a
SHA512 (openvas-client-2.0.1.tar.gz) = b20235fb9b6d6355a01b02156f6b10b78c98e74e1ebcfac586167989c8175f347a8eaf6eab543a76556745ef4c6aaa88a6e63f984a081d55a7f496d6063fe892
Size (openvas-client-2.0.1.tar.gz) = 629551 bytes
SHA1 (patch-aa) = ffca8ce1116a4014e1a65f53536e0fc4faeeb675
SHA1 (patch-nessus_nessus.c) = 9c2e10a8abe410db8c9b8a7a575dd6cfdbec5804

23
security/openvas-client/patches/patch-nessus_nessus.c Normal file
View file

@ -0,0 +1,23 @@
$NetBSD: patch-nessus_nessus.c,v 1.1 2016/03/29 22:00:14 joerg Exp $
--- nessus/nessus.c.orig 2016-03-29 18:19:57.396124258 +0000
+++ nessus/nessus.c
@@ -410,9 +410,7 @@ Please launch openvasclient-mkrand(1) fi
}
if (ssl_mt == NULL)
{
- if (strcasecmp(ssl_ver, "SSLv2") == 0)
- ssl_mt = SSLv2_client_method();
- else if (strcasecmp(ssl_ver, "SSLv3") == 0)
+ if (strcasecmp(ssl_ver, "SSLv3") == 0)
ssl_mt = SSLv3_client_method();
else if (strcasecmp(ssl_ver, "SSLv23") == 0)
ssl_mt = SSLv23_client_method();
@@ -443,6 +441,7 @@ Please launch openvasclient-mkrand(1) fi
return "SSL error";
}
+ SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv2);
if (SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL) < 0)
sslerror("SSL_CTX_set_options(SSL_OP_ALL)");