aboutsummaryrefslogtreecommitdiff
path: root/gnu/packages/patches/w3m-disable-sslv2-and-sslv3.patch
diff options
context:
space:
mode:
authorLeo Famulari <leo@famulari.name>2016-01-05 19:26:25 -0500
committerLeo Famulari <leo@famulari.name>2016-01-07 02:35:38 -0500
commit62339e2d493bf87a3aabe12e45458581e9705d83 (patch)
tree31a9bd122f8827aa2cf349d87ea040bb5cca5b9e /gnu/packages/patches/w3m-disable-sslv2-and-sslv3.patch
parente6352001c444a82141ea4457e49e69a1c3f8b2bb (diff)
downloadguix-62339e2d493bf87a3aabe12e45458581e9705d83.tar
guix-62339e2d493bf87a3aabe12e45458581e9705d83.tar.gz
gnu: w3m: Enable SSL, disable broken protocols and ciphers.
Fixes <http://bugs.gnu.org/16791>. * gnu/packages/patches/w3m-force-ssl_verify_server-on.patch: New file. * gnu/packages/patches/w3m-disable-sslv2-and-sslv3.patch: New file. * gnu/packages/patches/w3m-disable-weak-ciphers.patch: New file. * gnu/packages/w3m.scm (w3m)[source]: Add patches. * gnu-system.am (dist_patch_DATA): Add the new files.
Diffstat (limited to 'gnu/packages/patches/w3m-disable-sslv2-and-sslv3.patch')
-rw-r--r--gnu/packages/patches/w3m-disable-sslv2-and-sslv3.patch24
1 files changed, 24 insertions, 0 deletions
diff --git a/gnu/packages/patches/w3m-disable-sslv2-and-sslv3.patch b/gnu/packages/patches/w3m-disable-sslv2-and-sslv3.patch
new file mode 100644
index 0000000000..5b78f2d909
--- /dev/null
+++ b/gnu/packages/patches/w3m-disable-sslv2-and-sslv3.patch
@@ -0,0 +1,24 @@
+Subject: Disable SSLv2 and SSLv3.
+
+The only remaining methods are TLSv1.* (the code never distinguishes
+between TLSv1.0, TLSv1.1, and TLSv1.2).
+---
+ fm.h | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/fm.h b/fm.h
+index 320906c..ddcd4fc 100644
+--- a/fm.h
++++ b/fm.h
+@@ -1144,7 +1144,7 @@ global int ssl_path_modified init(FALSE);
+ #endif /* defined(USE_SSL) &&
+ * defined(USE_SSL_VERIFY) */
+ #ifdef USE_SSL
+-global char *ssl_forbid_method init(NULL);
++global char *ssl_forbid_method init("2, 3");
+ #endif
+
+ global int is_redisplay init(FALSE);
+--
+2.6.4
+