SECURITY update to sieve-connect 0.85; fix TLS hostname verification.

From maintainer LEVAI Daniel, tweak to enforce IO::Socket::SSL version by me
This commit is contained in:
sthen 2013-04-16 10:22:11 +00:00
parent e6d8ee2eba
commit 8a0195a1b7
3 changed files with 11 additions and 11 deletions

View File

@ -1,8 +1,8 @@
# $OpenBSD: Makefile,v 1.5 2013/03/11 11:23:53 espie Exp $
# $OpenBSD: Makefile,v 1.6 2013/04/16 10:22:11 sthen Exp $
COMMENT = perl sieveshell-compatible ManageSieve client
DISTNAME = sieve-connect-0.84
DISTNAME = sieve-connect-0.85
CATEGORIES = mail
PKG_ARCH = *
@ -19,7 +19,7 @@ PERMIT_PACKAGE_CDROM = Yes
NO_TEST = Yes
RUN_DEPENDS = net/p5-Net-DNS \
net/p5-IO-Socket-INET6 \
security/p5-IO-Socket-SSL \
security/p5-IO-Socket-SSL>=1.14 \
security/p5-Authen-SASL \
devel/p5-Term-ReadKey

View File

@ -1,2 +1,2 @@
SHA256 (sieve-connect-0.84.tar.bz2) = PNowxPf7vjM5od2TTJiTFeWgDDLqIDSU1cja53o2+kc=
SIZE (sieve-connect-0.84.tar.bz2) = 31737
SHA256 (sieve-connect-0.85.tar.bz2) = TU4+7IgatF9SsiddrekEeNemtHlCaV77KSJ9FTiknn8=
SIZE (sieve-connect-0.85.tar.bz2) = 34323

View File

@ -1,10 +1,10 @@
$OpenBSD: patch-sieve-connect_pl,v 1.1 2011/04/02 14:31:42 sthen Exp $
--- sieve-connect.pl.orig Sat Apr 2 07:13:57 2011
+++ sieve-connect.pl Sat Apr 2 08:57:18 2011
@@ -44,7 +44,7 @@
SSL_version => 'TLSv1',
$OpenBSD: patch-sieve-connect_pl,v 1.2 2013/04/16 10:22:11 sthen Exp $
--- sieve-connect.pl.orig Tue Apr 16 10:07:35 2013
+++ sieve-connect.pl Tue Apr 16 10:07:38 2013
@@ -47,7 +47,7 @@ my %ssl_options = (
SSL_version => 'SSLv23:!SSLv2:!SSLv3',
SSL_cipher_list => 'ALL:!aNULL:!NULL:!LOW:!EXP:!ADH:@STRENGTH',
SSL_verify_mode => 0x01,
SSL_verify_mode => 0x03,
- SSL_ca_path => '/etc/ssl/certs',
+ SSL_ca_file => '/etc/ssl/cert.pem',
);