guard SSLv3_client_method with OPENSSL_NO_SSL3

This commit is contained in:
sthen 2015-07-18 21:00:13 +00:00
parent ba741b313c
commit 682738c92b
2 changed files with 34 additions and 0 deletions

View File

@ -0,0 +1,17 @@
$OpenBSD: patch-src_ssl_support_cc,v 1.1 2015/07/18 21:00:13 sthen Exp $
--- src/ssl/support.cc.orig Sat Jul 18 14:59:03 2015
+++ src/ssl/support.cc Sat Jul 18 14:59:41 2015
@@ -1070,8 +1070,13 @@ Ssl::method(int version)
break;
case 3:
+#if !defined(OPENSSL_NO_SSL3)
debugs(83, 5, "Using SSLv3.");
return SSLv3_client_method();
+#else
+ debugs(83, DBG_IMPORTANT, "SSLv3 is not available in this Proxy.");
+ return NULL;
+#endif
break;
case 4:

View File

@ -0,0 +1,17 @@
$OpenBSD: patch-src_ssl_support_cc,v 1.1 2015/07/18 21:00:13 sthen Exp $
--- src/ssl/support.cc.orig Sat Jul 18 14:57:38 2015
+++ src/ssl/support.cc Sat Jul 18 14:58:27 2015
@@ -1031,8 +1031,13 @@ sslCreateClientContext(const char *certfile, const cha
break;
case 3:
+#ifndef OPENSSL_NO_SSL3
debugs(83, 5, "Using SSLv3.");
method = SSLv3_client_method();
+#else
+ debugs(83, DBG_IMPORTANT, "SSLv3 is not available in this Proxy.");
+ return NULL;
+#endif
break;
case 4: