[arch-commits] Commit in fetchmail/trunk (PKGBUILD disable-sslv3.patch)

[Jan Steffens]

    Date: Thursday, March 3, 2016 @ 18:21:04
  Author: heftig
Revision: 260668

Disable SSLv3

Added:
  fetchmail/trunk/disable-sslv3.patch
Modified:
  fetchmail/trunk/PKGBUILD

---------------------+
 PKGBUILD            |    7 +++++++
 disable-sslv3.patch |   20 ++++++++++++++++++++
 2 files changed, 27 insertions(+)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2016-03-03 15:56:27 UTC (rev 260667)
+++ PKGBUILD	2016-03-03 17:21:04 UTC (rev 260668)
@@ -15,13 +15,20 @@
 install='fetchmail.install'
 source=("http://sourceforge.net/projects/fetchmail/files/branch_6.3/${pkgname}-${pkgver}.tar.xz"
         "http://sourceforge.net/projects/fetchmail/files/branch_6.3/${pkgname}-${pkgver}.tar.xz.asc"
+        'disable-sslv3.patch'
         'fetchmail.tmpfiles' 'fetchmail.service')
 sha1sums=('de8dbe62a8edfa232ee4278257a1fe67aa1c797a'
           'SKIP'
+          'dab3bf46b033e8ee7cadc020c1fb4ce325f46693'
           '199ba749c829f22286c34aabcf8b7dd5bbd7c0e6'
           '0fc1870a33d1e0efb70169ddf1b6adc9d253e076')
 validpgpkeys=('FDD00C436E3307E10758C6A8BE618339052E7D95')
 
+prepare() {
+  cd "${srcdir}/${pkgname}-${pkgver}"
+  patch -Np1 -i ../disable-sslv3.patch
+}
+
 build() {
   cd "${srcdir}/${pkgname}-${pkgver}"
   sed -i 's|/usr/bin/env python|/usr/bin/env python2|' fetchmailconf.py

Added: disable-sslv3.patch
===================================================================
--- disable-sslv3.patch	                        (rev 0)
+++ disable-sslv3.patch	2016-03-03 17:21:04 UTC (rev 260668)
@@ -0,0 +1,20 @@
+diff -u -r fetchmail-6.3.26/socket.c fetchmail-6.3.26-nossl3/socket.c
+--- fetchmail-6.3.26/socket.c	2013-04-23 22:00:45.000000000 +0200
++++ fetchmail-6.3.26-nossl3/socket.c	2016-03-03 18:18:46.688881618 +0100
+@@ -907,14 +907,11 @@
+ 	_ssl_context[sock] = NULL;
+ 	if(myproto) {
+ 		if(!strcasecmp("ssl2",myproto)) {
+-#if HAVE_DECL_SSLV2_CLIENT_METHOD + 0 > 0
+-			_ctx[sock] = SSL_CTX_new(SSLv2_client_method());
+-#else
+ 			report(stderr, GT_("Your operating system does not support SSLv2.\n"));
+ 			return -1;
+-#endif
+ 		} else if(!strcasecmp("ssl3",myproto)) {
+-			_ctx[sock] = SSL_CTX_new(SSLv3_client_method());
++			report(stderr, GT_("Your operating system does not support SSLv3.\n"));
++			return -1;
+ 		} else if(!strcasecmp("tls1",myproto)) {
+ 			_ctx[sock] = SSL_CTX_new(TLSv1_client_method());
+ 		} else if (!strcasecmp("ssl23",myproto)) {