diff --git a/debian/patches/10_sslutils_checksslv3 b/debian/patches/10_sslutils_checksslv3 new file mode 100644 index 0000000..a38a9cd --- /dev/null +++ b/debian/patches/10_sslutils_checksslv3 @@ -0,0 +1,26 @@ +From 4e786f83decca053c98293fc4a4a555e4d247c1a Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?J=C3=A9r=C3=A9mie=20Courr=C3=A8ges-Anglas?= +Date: Sat, 25 Jul 2015 20:02:14 -0600 +Subject: [PATCH] sslutils: Check if OpenSSL supports SSLv3. + +--- + plugins/sslutils.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/plugins/sslutils.c b/plugins/sslutils.c +index d0ae474..4933dd0 100644 +--- a/plugins/sslutils.c ++++ b/plugins/sslutils.c +@@ -66,7 +66,12 @@ int np_net_ssl_init_with_hostname_version_and_cert(int sd, char *host_name, int + #endif + break; + case 3: /* SSLv3 protocol */ ++#if defined(OPENSSL_NO_SSL3) ++ printf(("%s\n", _("CRITICAL - SSL protocol version 3 is not supported by your SSL library."))); ++ return STATE_CRITICAL; ++#else + method = SSLv3_client_method(); ++#endif + break; + default: /* Unsupported */ + printf("%s\n", _("CRITICAL - Unsupported SSL protocol version.")); diff --git a/debian/patches/series b/debian/patches/series index de39cb6..b976f43 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -1,2 +1,3 @@ 02_check_icmp_links # commited upstream +10_sslutils_checksslv3