Add patches/10_sslutils_checksslv3 from upstream maint branch

This commit is contained in:
Jan Wagner 2015-10-04 12:37:22 +02:00
parent 5dbc8cbf0c
commit 608ba7503d
2 changed files with 27 additions and 0 deletions

26
debian/patches/10_sslutils_checksslv3 vendored Normal file
View file

@ -0,0 +1,26 @@
From 4e786f83decca053c98293fc4a4a555e4d247c1a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=A9mie=20Courr=C3=A8ges-Anglas?= <jca@wxcvbn.org>
Date: Sat, 25 Jul 2015 20:02:14 -0600
Subject: [PATCH] sslutils: Check if OpenSSL supports SSLv3.
---
plugins/sslutils.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/plugins/sslutils.c b/plugins/sslutils.c
index d0ae474..4933dd0 100644
--- a/plugins/sslutils.c
+++ b/plugins/sslutils.c
@@ -66,7 +66,12 @@ int np_net_ssl_init_with_hostname_version_and_cert(int sd, char *host_name, int
#endif
break;
case 3: /* SSLv3 protocol */
+#if defined(OPENSSL_NO_SSL3)
+ printf(("%s\n", _("CRITICAL - SSL protocol version 3 is not supported by your SSL library.")));
+ return STATE_CRITICAL;
+#else
method = SSLv3_client_method();
+#endif
break;
default: /* Unsupported */
printf("%s\n", _("CRITICAL - Unsupported SSL protocol version."));

View file

@ -1,2 +1,3 @@
02_check_icmp_links
# commited upstream
10_sslutils_checksslv3