Add patches/10_sslutils_checksslv3 from upstream maint branch
This commit is contained in:
		
							parent
							
								
									5dbc8cbf0c
								
							
						
					
					
						commit
						608ba7503d
					
				
					 2 changed files with 27 additions and 0 deletions
				
			
		
							
								
								
									
										26
									
								
								debian/patches/10_sslutils_checksslv3
									
										
									
									
										vendored
									
									
										Normal file
									
								
							
							
						
						
									
										26
									
								
								debian/patches/10_sslutils_checksslv3
									
										
									
									
										vendored
									
									
										Normal file
									
								
							| 
						 | 
				
			
			@ -0,0 +1,26 @@
 | 
			
		|||
From 4e786f83decca053c98293fc4a4a555e4d247c1a Mon Sep 17 00:00:00 2001
 | 
			
		||||
From: =?UTF-8?q?J=C3=A9r=C3=A9mie=20Courr=C3=A8ges-Anglas?= <jca@wxcvbn.org>
 | 
			
		||||
Date: Sat, 25 Jul 2015 20:02:14 -0600
 | 
			
		||||
Subject: [PATCH] sslutils: Check if OpenSSL supports SSLv3.
 | 
			
		||||
 | 
			
		||||
---
 | 
			
		||||
 plugins/sslutils.c | 5 +++++
 | 
			
		||||
 1 file changed, 5 insertions(+)
 | 
			
		||||
 | 
			
		||||
diff --git a/plugins/sslutils.c b/plugins/sslutils.c
 | 
			
		||||
index d0ae474..4933dd0 100644
 | 
			
		||||
--- a/plugins/sslutils.c
 | 
			
		||||
+++ b/plugins/sslutils.c
 | 
			
		||||
@@ -66,7 +66,12 @@ int np_net_ssl_init_with_hostname_version_and_cert(int sd, char *host_name, int
 | 
			
		||||
 #endif
 | 
			
		||||
 		break;
 | 
			
		||||
 	case 3: /* SSLv3 protocol */
 | 
			
		||||
+#if defined(OPENSSL_NO_SSL3)
 | 
			
		||||
+		printf(("%s\n", _("CRITICAL - SSL protocol version 3 is not supported by your SSL library.")));
 | 
			
		||||
+		return STATE_CRITICAL;
 | 
			
		||||
+#else
 | 
			
		||||
 		method = SSLv3_client_method();
 | 
			
		||||
+#endif
 | 
			
		||||
 		break;
 | 
			
		||||
 	default: /* Unsupported */
 | 
			
		||||
 		printf("%s\n", _("CRITICAL - Unsupported SSL protocol version."));
 | 
			
		||||
							
								
								
									
										1
									
								
								debian/patches/series
									
										
									
									
										vendored
									
									
								
							
							
						
						
									
										1
									
								
								debian/patches/series
									
										
									
									
										vendored
									
									
								
							| 
						 | 
				
			
			@ -1,2 +1,3 @@
 | 
			
		|||
02_check_icmp_links
 | 
			
		||||
# commited upstream
 | 
			
		||||
10_sslutils_checksslv3
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue