summaryrefslogtreecommitdiff
path: root/www/chromium/files/patch-net__ssl__ssl_config.h
diff options
context:
space:
mode:
authorRene Ladan <rene@FreeBSD.org>2014-10-15 15:10:04 +0000
committerRene Ladan <rene@FreeBSD.org>2014-10-15 15:10:04 +0000
commite560d3921fc56d6cbef117413fb51ed115b8f70f (patch)
treeb929f031cddaf2ba234d74f7e491a7bc7c4ec962 /www/chromium/files/patch-net__ssl__ssl_config.h
parent- Update from 37.2.1 to 38.0.0 (diff)
www/chromium: desupport SSLv3.0, taken from upstream GIT repository.
While here really fix the desktop icon. Bump PORTREVISION Obtained from: https://chromium.googlesource.com/chromium/src/+/701bb044ac5ad4f1572e86b83a673cc49383efb4 Obtained from: https://chromium.googlesource.com/chromium/src/+/32352ad08ee673a4d43e8593ce988b224f6482d3 MFH: 2014Q4 Security: CVE-2014-3566 ("Poodle")
Diffstat (limited to 'www/chromium/files/patch-net__ssl__ssl_config.h')
-rw-r--r--www/chromium/files/patch-net__ssl__ssl_config.h25
1 files changed, 25 insertions, 0 deletions
diff --git a/www/chromium/files/patch-net__ssl__ssl_config.h b/www/chromium/files/patch-net__ssl__ssl_config.h
new file mode 100644
index 000000000000..c9593650685a
--- /dev/null
+++ b/www/chromium/files/patch-net__ssl__ssl_config.h
@@ -0,0 +1,25 @@
+--- net/ssl/ssl_config.h.orig 2014-10-02 17:19:00 UTC
++++ net/ssl/ssl_config.h
+@@ -32,6 +32,9 @@
+ // Default maximum protocol version.
+ NET_EXPORT extern const uint16 kDefaultSSLVersionMax;
+
++// Default minimum protocol version that it's acceptable to fallback to.
++NET_EXPORT extern const uint16 kDefaultSSLVersionFallbackMin;
++
+ // A collection of SSL-related configuration settings.
+ struct NET_EXPORT SSLConfig {
+ // Default to revocation checking.
+@@ -73,6 +76,12 @@
+ uint16 version_min;
+ uint16 version_max;
+
++ // version_fallback_min contains the minimum version that is acceptable to
++ // fallback to. Versions before this may be tried to see whether they would
++ // have succeeded and thus to give a better message to the user, but the
++ // resulting connection won't be used in these cases.
++ uint16 version_fallback_min;
++
+ // Presorted list of cipher suites which should be explicitly prevented from
+ // being used in addition to those disabled by the net built-in policy.
+ //