From 97f65e06566f3bb15bc7395624017b8e6ca0d043 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andr=C3=A9=20Fabian=20Silva=20Delgado?=
 <emulatorman@parabola.nu>
Date: Sat, 21 Sep 2013 05:20:52 -0300
Subject: iceweasel-libre: revert changes related to TLS due unstability

iceweasel-libre 24 version should be possible to enable TLS 1.1, but there are 2 open issues that prevent us from changing the default to enable it:
- Compatibility with servers that are not tolerant to sending TLS 1.1 => https://bugzilla.mozilla.org/show_bug.cgi?id=839310
- Prevent downgrade attacks => https://bugzilla.mozilla.org/show_bug.cgi?id=861310
---
 libre/iceweasel-libre/PKGBUILD  | 4 ++--
 libre/iceweasel-libre/vendor.js | 3 ---
 2 files changed, 2 insertions(+), 5 deletions(-)

(limited to 'libre')

diff --git a/libre/iceweasel-libre/PKGBUILD b/libre/iceweasel-libre/PKGBUILD
index 974bbc7d0..069b2827d 100644
--- a/libre/iceweasel-libre/PKGBUILD
+++ b/libre/iceweasel-libre/PKGBUILD
@@ -23,7 +23,7 @@ _pkgname=iceweasel
 pkgname=iceweasel-libre
 epoch=1
 pkgver=$_debver.$_debrel
-pkgrel=2
+pkgrel=1
 
 pkgdesc="A libre version of Debian Iceweasel, the standalone web browser based on Mozilla Firefox."
 arch=(i686 x86_64 mips64el)
@@ -64,7 +64,7 @@ md5sums=('8f24807d67599516850a4bdca2b2fbd6'
          '5b32b39c033a33f45e2cfc6c3e80f20c'
          '7b9e5996dd9fe0b186a43a297db1c6b5'
          'abf5ecb74caa857abb42bcfbb3442d9c'
-         'cda65c93ce00a95f46d224a2297f5800'
+         '121fefaa040936c3b96298da0c49f450'
          'a8fc4658d45b6bf9350023e5c3f34e56'
          'f1594fa3567e5b70202c3432d7c00202')
 
diff --git a/libre/iceweasel-libre/vendor.js b/libre/iceweasel-libre/vendor.js
index f81f2bdf6..91414dbbd 100644
--- a/libre/iceweasel-libre/vendor.js
+++ b/libre/iceweasel-libre/vendor.js
@@ -22,6 +22,3 @@ pref("social.remote-install.enabled", false);
 
 // Disable missing nonfree flash notification
 pref("plugins.notifyMissingFlash", false);
-
-// Enable TLS/1.1 support
-pref("security.tls.version.max", 2);
-- 
cgit v1.2.3-2-g168b