summaryrefslogtreecommitdiff
path: root/libre/nss/ssl-renegotiate-transitional.patch
diff options
context:
space:
mode:
authorcoadde [Márcio Alexandre Silva Delgado] <coadde@parabola.nu>2014-09-23 11:29:02 -0300
committercoadde [Márcio Alexandre Silva Delgado] <coadde@parabola.nu>2014-09-23 11:29:02 -0300
commit552e544c262c5d6a5943d32a1998fec56a2f63b6 (patch)
tree6c3355eb7765a013e52e2d12554c942157168a20 /libre/nss/ssl-renegotiate-transitional.patch
parent2c5a2f0b34bc896906b7eb3b070936602b01343c (diff)
parent1a33f0476025060eac9cdebb15cf6fa3508f14f7 (diff)
Merge branch 'master' of ssh://lukeshu.com:1863/srv/git/mirror/parabola/abslibre
Diffstat (limited to 'libre/nss/ssl-renegotiate-transitional.patch')
-rw-r--r--libre/nss/ssl-renegotiate-transitional.patch21
1 files changed, 0 insertions, 21 deletions
diff --git a/libre/nss/ssl-renegotiate-transitional.patch b/libre/nss/ssl-renegotiate-transitional.patch
deleted file mode 100644
index f457c5551..000000000
--- a/libre/nss/ssl-renegotiate-transitional.patch
+++ /dev/null
@@ -1,21 +0,0 @@
-Enable transitional scheme for ssl renegotiation:
-
-(from mozilla/security/nss/lib/ssl/ssl.h)
-Disallow unsafe renegotiation in server sockets only, but allow clients
-to continue to renegotiate with vulnerable servers.
-This value should only be used during the transition period when few
-servers have been upgraded.
-
-diff --git a/mozilla/security/nss/lib/ssl/sslsock.c b/mozilla/security/nss/lib/ssl/sslsock.c
-index f1d1921..c074360 100644
---- a/mozilla/security/nss/lib/ssl/sslsock.c
-+++ b/mozilla/security/nss/lib/ssl/sslsock.c
-@@ -181,7 +181,7 @@ static sslOptions ssl_defaults = {
- PR_FALSE, /* noLocks */
- PR_FALSE, /* enableSessionTickets */
- PR_FALSE, /* enableDeflate */
-- 2, /* enableRenegotiation (default: requires extension) */
-+ 3, /* enableRenegotiation (default: transitional) */
- PR_FALSE, /* requireSafeNegotiation */
- };
-