diff options
Diffstat (limited to '0001-enforce-system-crypto-policies.patch')
| -rw-r--r-- | 0001-enforce-system-crypto-policies.patch | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/0001-enforce-system-crypto-policies.patch b/0001-enforce-system-crypto-policies.patch index 59e1b0c..4c42bc1 100644 --- a/0001-enforce-system-crypto-policies.patch +++ b/0001-enforce-system-crypto-policies.patch @@ -1,4 +1,4 @@ -From e753490615e75d93bd485ca09633e388dd483958 Mon Sep 17 00:00:00 2001 +From f670b34632e994661e252f5f163023f71b2741fb Mon Sep 17 00:00:00 2001 From: Sergey Avseyev <sergey.avseyev@gmail.com> Date: Fri, 23 Feb 2018 19:02:53 +0300 Subject: [PATCH] Enforce system crypto policies @@ -8,7 +8,7 @@ Subject: [PATCH] Enforce system crypto policies 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/ssl/ssl_common.c b/src/ssl/ssl_common.c -index 6ba8579d..ce7c1e0b 100644 +index 914b6f31..4b11ad04 100644 --- a/src/ssl/ssl_common.c +++ b/src/ssl/ssl_common.c @@ -278,8 +278,7 @@ lcbio_pSSLCTX lcbio_ssl_new(const char *tsfile, const char *cafile, const char * @@ -19,8 +19,8 @@ index 6ba8579d..ce7c1e0b 100644 -// SSL_CTX_set_cipher_list(ret->ctx, "!NULL"); + SSL_CTX_set_cipher_list(ret->ctx, "PROFILE=SYSTEM"); - if (cafile) { - lcb_log(LOGARGS_S(settings, LCB_LOG_DEBUG), "Load verify locations from \"%s\"", tsfile ? tsfile : keyfile); + if (cafile || tsfile) { + lcb_log(LOGARGS_S(settings, LCB_LOG_DEBUG), "Load verify locations from \"%s\"", tsfile ? tsfile : cafile); -- -2.14.3 +2.19.2 |