diff options
| author | Andrew Clemons <andrew.clemons@gmail.com> | 2017-02-24 23:52:01 +0700 |
|---|---|---|
| committer | Willy Sudiarto Raharjo <willysr@slackbuilds.org> | 2017-02-24 23:52:01 +0700 |
| commit | a8a54eb166c2cf2a71e66fbafde625623f3f2bf7 (patch) | |
| tree | 04c0bfb0767d86b28a1c82d3157412179382554c /network/emailrelay/patches | |
| parent | f6010a25674d9f56e32b89f976af64432da404b9 (diff) | |
| download | slackbuilds-a8a54eb166c2cf2a71e66fbafde625623f3f2bf7.tar.gz | |
network/emailrelay: Added (SMTP proxy and store-and-forward MTA).
Signed-off-by: Willy Sudiarto Raharjo <willysr@slackbuilds.org>
Diffstat (limited to 'network/emailrelay/patches')
| -rw-r--r-- | network/emailrelay/patches/a9dcd228875a40ef2b475ff6f328332bd6f6e4f6.patch | 31 | ||||
| -rw-r--r-- | network/emailrelay/patches/b79f2cb7c70d7c311162cb9d38b3921b76ddae3d.patch | 26 |
2 files changed, 57 insertions, 0 deletions
diff --git a/network/emailrelay/patches/a9dcd228875a40ef2b475ff6f328332bd6f6e4f6.patch b/network/emailrelay/patches/a9dcd228875a40ef2b475ff6f328332bd6f6e4f6.patch new file mode 100644 index 0000000000..e6e15147f0 --- /dev/null +++ b/network/emailrelay/patches/a9dcd228875a40ef2b475ff6f328332bd6f6e4f6.patch @@ -0,0 +1,31 @@ +From a9dcd228875a40ef2b475ff6f328332bd6f6e4f6 Mon Sep 17 00:00:00 2001 +From: Andrew Clemons <andrew.clemons@gmail.com> +Date: Thu, 5 May 2016 12:56:52 +1200 +Subject: [PATCH] --tls-config 3 only enabled SSLv3 + +This flag is meant to enable SSLv3 and any later protocol but actually +only enabled SSLv3. + +https://www.openssl.org/docs/man1.0.1/ssl/SSLv3_method.html +--- + src/gssl/gssl_openssl.cpp | 7 ++++--- + 1 file changed, 4 insertions(+), 3 deletions(-) + +diff --git a/src/gssl/gssl_openssl.cpp b/src/gssl/gssl_openssl.cpp +index f64ad94..f8a225f 100644 +--- a/src/gssl/gssl_openssl.cpp ++++ b/src/gssl/gssl_openssl.cpp +@@ -292,9 +292,10 @@ GSsl::Context::Context( const std::string & pem_file , unsigned int flags ) + { + if( (flags&3U) == 2U ) + m_ssl_ctx = SSL_CTX_new(SSLv23_method()) ; +- else if( (flags&3U) == 3U ) +- m_ssl_ctx = SSL_CTX_new(SSLv3_method()) ; +- else { ++ else if( (flags&3U) == 3U ) { ++ m_ssl_ctx = SSL_CTX_new(SSLv23_method()) ; ++ SSL_CTX_set_options(m_ssl_ctx, SSL_OP_NO_SSLv2) ; ++ } else { + m_ssl_ctx = SSL_CTX_new(SSLv23_method()) ; + SSL_CTX_set_options(m_ssl_ctx, SSL_OP_NO_SSLv2| SSL_OP_NO_SSLv3) ; + } diff --git a/network/emailrelay/patches/b79f2cb7c70d7c311162cb9d38b3921b76ddae3d.patch b/network/emailrelay/patches/b79f2cb7c70d7c311162cb9d38b3921b76ddae3d.patch new file mode 100644 index 0000000000..3e0f6f2115 --- /dev/null +++ b/network/emailrelay/patches/b79f2cb7c70d7c311162cb9d38b3921b76ddae3d.patch @@ -0,0 +1,26 @@ +From b79f2cb7c70d7c311162cb9d38b3921b76ddae3d Mon Sep 17 00:00:00 2001 +From: Andrew Clemons <andrew.clemons@gmail.com> +Date: Thu, 5 May 2016 12:55:02 +1200 +Subject: [PATCH] Use TLS1.1 and TLS1.2 if openssl supports it + +--- + src/gssl/gssl_openssl.cpp | 6 ++++-- + 1 file changed, 4 insertions(+), 2 deletions(-) + +diff --git a/src/gssl/gssl_openssl.cpp b/src/gssl/gssl_openssl.cpp +index 34af44f..f64ad94 100644 +--- a/src/gssl/gssl_openssl.cpp ++++ b/src/gssl/gssl_openssl.cpp +@@ -294,8 +294,10 @@ GSsl::Context::Context( const std::string & pem_file , unsigned int flags ) + m_ssl_ctx = SSL_CTX_new(SSLv23_method()) ; + else if( (flags&3U) == 3U ) + m_ssl_ctx = SSL_CTX_new(SSLv3_method()) ; +- else +- m_ssl_ctx = SSL_CTX_new(TLSv1_method()) ; ++ else { ++ m_ssl_ctx = SSL_CTX_new(SSLv23_method()) ; ++ SSL_CTX_set_options(m_ssl_ctx, SSL_OP_NO_SSLv2| SSL_OP_NO_SSLv3) ; ++ } + + if( m_ssl_ctx == NULL ) + throw Error( "SSL_CTX_new" , ERR_get_error() ) ; |