From owner-svn-ports-all@FreeBSD.ORG Thu Mar 19 17:04:09 2015 Return-Path: Delivered-To: svn-ports-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6F753FAE; Thu, 19 Mar 2015 17:04:09 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5AD5DFA7; Thu, 19 Mar 2015 17:04:09 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id t2JH490t055757; Thu, 19 Mar 2015 17:04:09 GMT (envelope-from bdrewery@FreeBSD.org) Received: (from bdrewery@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id t2JH48MR055755; Thu, 19 Mar 2015 17:04:08 GMT (envelope-from bdrewery@FreeBSD.org) Message-Id: <201503191704.t2JH48MR055755@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: bdrewery set sender to bdrewery@FreeBSD.org using -f From: Bryan Drewery Date: Thu, 19 Mar 2015 17:04:08 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r381622 - in head/mail/dovecot: . files X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Mar 2015 17:04:09 -0000 Author: bdrewery Date: Thu Mar 19 17:04:07 2015 New Revision: 381622 URL: https://svnweb.freebsd.org/changeset/ports/381622 QAT: https://qat.redports.org/buildarchive/r381622/ Log: Disable SSLv2 and SSLv3. PR: 197027 Submitted by: Kai Gallasch MFH: 2015Q1 Added: head/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c (contents, props changed) Modified: head/mail/dovecot/Makefile Modified: head/mail/dovecot/Makefile ============================================================================== --- head/mail/dovecot/Makefile Thu Mar 19 17:03:33 2015 (r381621) +++ head/mail/dovecot/Makefile Thu Mar 19 17:04:07 2015 (r381622) @@ -3,7 +3,7 @@ PORTNAME= dovecot PORTVERSION= 1.2.17 -PORTREVISION= 5 +PORTREVISION= 6 CATEGORIES= mail ipv6 MASTER_SITES= http://www.dovecot.org/releases/${PORTVERSION:R}/ \ http://www.rename-it.nl/dovecot/${PORTVERSION:R}/ Added: head/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/mail/dovecot/files/patch-src__login-common__ssl-proxy-openssl.c Thu Mar 19 17:04:07 2015 (r381622) @@ -0,0 +1,11 @@ +--- src/login-common/ssl-proxy-openssl.c.orig 2015-03-19 11:57:04.578367000 -0500 ++++ src/login-common/ssl-proxy-openssl.c 2015-03-19 11:57:21.859436000 -0500 +@@ -818,7 +818,7 @@ static void ssl_proxy_ctx_init(SSL_CTX * + { + const char *cafile; + +- SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL); ++ SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3); + + cafile = getenv("SSL_CA_FILE"); + if (cafile != NULL) {