diff options
| author | Dima Panov <fluffy@FreeBSD.org> | 2021-02-03 02:02:58 +0000 |
|---|---|---|
| committer | Dima Panov <fluffy@FreeBSD.org> | 2021-02-03 02:02:58 +0000 |
| commit | fa82d308042aa39350565a6c1b300335ed2c5598 (patch) | |
| tree | 85df4889ae974e85629d469c936999f7f038fdd8 /databases/mysql57-server/files/patch-vio_viosslfactories.c | |
| parent | databases/mysql56*: update to 5.6.51 (diff) | |
databases/mysql56*: update to 5.7.33 release
Disable detect of TLSv1.3 functions - it's broken with LibreSSL
Release Notes: https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-33.html
Requested by: joneum
Notes
Notes:
svn path=/head/; revision=563858
Diffstat (limited to 'databases/mysql57-server/files/patch-vio_viosslfactories.c')
| -rw-r--r-- | databases/mysql57-server/files/patch-vio_viosslfactories.c | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/databases/mysql57-server/files/patch-vio_viosslfactories.c b/databases/mysql57-server/files/patch-vio_viosslfactories.c index c114c25c07cd..00c32ea9dca3 100644 --- a/databases/mysql57-server/files/patch-vio_viosslfactories.c +++ b/databases/mysql57-server/files/patch-vio_viosslfactories.c @@ -33,3 +33,30 @@ } return(dh); } +@@ -503,7 +501,7 @@ new_VioSSLFd(const char *key_file, const char *cert_fi + struct st_VioSSLFd *ssl_fd; + /* MySQL 5.7 supports TLS up to v1.2, explicitly disable TLSv1.3. */ + long ssl_ctx_options= SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 +-#ifdef HAVE_TLSv13 ++#if defined(HAVE_TLSv13) && !defined(LIBRESSL_VERSION_NUMBER) + | SSL_OP_NO_TLSv1_3 + #endif /* HAVE_TLSv13 */ + ; +@@ -536,7 +534,7 @@ new_VioSSLFd(const char *key_file, const char *cert_fi + SSL_OP_NO_TLSv1 | + SSL_OP_NO_TLSv1_1 + | SSL_OP_NO_TLSv1_2 +-#ifdef HAVE_TLSv13 ++#if defined(HAVE_TLSv13) && !defined(LIBRESSL_VERSION_NUMBER) + | SSL_OP_NO_TLSv1_3 + #endif /* HAVE_TLSv13 */ + | SSL_OP_NO_TICKET +@@ -559,7 +557,7 @@ new_VioSSLFd(const char *key_file, const char *cert_fi + + SSL_CTX_set_options(ssl_fd->ssl_context, ssl_ctx_options); + +-#ifdef HAVE_TLSv13 ++#if defined(HAVE_TLSv13) && !defined(LIBRESSL_VERSION_NUMBER) + /* + MySQL 5.7 doesn't support TLSv1.3 - set empty TLSv1.3 ciphersuites. + */ |