source: trunk/server/common/patches/openssl-1.0.0n-cipher-change.patch @ 2560

Last change on this file since 2560 was 2558, checked in by andersk, 9 years ago
Update OpenSSL to 1.0.0n
File size: 1.1 KB

  • openssl-1.0.0-beta5/ssl/ssl.h 

    diff -up openssl-1.0.0-beta5/ssl/ssl.h.cipher-change openssl-1.0.0-beta5/ssl/ssl.h
    old new typedef struct ssl_session_st 
    513513#define SSL_OP_NETSCAPE_CHALLENGE_BUG                   0x00000002L
    514514/* Allow initial connection to servers that don't support RI */
    515515#define SSL_OP_LEGACY_SERVER_CONNECT                    0x00000004L
    516 #define SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG         0x00000008L
     516#define SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG         0x00000008L /* no effect since 1.0.0c due to CVE-2010-4180 */
    517517#define SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG              0x00000010L
    518518#define SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER               0x00000020L
    519519#define SSL_OP_SAFARI_ECDHE_ECDSA_BUG                   0x00000040L
    … … typedef struct ssl_session_st 
    530530
    531531/* SSL_OP_ALL: various bug workarounds that should be rather harmless.
    532532 *             This used to be 0x000FFFFFL before 0.9.7. */
    533 #define SSL_OP_ALL                                      0x80000FFFL
     533#define SSL_OP_ALL                                      0x80000FF7L
    534534
    535535/* DTLS options */
    536536#define SSL_OP_NO_QUERY_MTU                 0x00001000L
Note: See TracBrowser for help on using the repository browser.