diff options
Diffstat (limited to 'mail/cyrus-imapd34/files/patch-imap__tls.c')
| -rw-r--r-- | mail/cyrus-imapd34/files/patch-imap__tls.c | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/mail/cyrus-imapd34/files/patch-imap__tls.c b/mail/cyrus-imapd34/files/patch-imap__tls.c new file mode 100644 index 000000000000..cc43b5c26384 --- /dev/null +++ b/mail/cyrus-imapd34/files/patch-imap__tls.c @@ -0,0 +1,22 @@ +--- imap/tls.c.orig 2018-04-30 02:05:44 UTC ++++ imap/tls.c +@@ -734,7 +734,9 @@ EXPORTED int tls_init_serverengine(c + off |= SSL_OP_ALL; /* Work around all known bugs */ + off |= SSL_OP_NO_SSLv2; /* Disable insecure SSLv2 */ + off |= SSL_OP_NO_SSLv3; /* Disable insecure SSLv3 */ ++#if defined(SSL_OP_NO_COMPRESSION) + off |= SSL_OP_NO_COMPRESSION; /* Disable TLS compression */ ++#endif + + const char *tls_versions = config_getstring(IMAPOPT_TLS_VERSIONS); + +@@ -1465,7 +1467,9 @@ HIDDEN int tls_init_clientengine(int ver + off |= SSL_OP_ALL; /* Work around all known bugs */ + off |= SSL_OP_NO_SSLv2; /* Disable insecure SSLv2 */ + off |= SSL_OP_NO_SSLv3; /* Disable insecure SSLv3 */ ++#if defined(SSL_OP_NO_COMPRESSION) + off |= SSL_OP_NO_COMPRESSION; /* Disable TLS compression */ ++#endif + + SSL_CTX_set_options(c_ctx, off); + SSL_CTX_set_info_callback(c_ctx, apps_ssl_info_callback); |