Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 12 Jul 2020 19:16:02 +0000 (UTC)
From:      Ashish SHUKLA <ashish@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r542090 - in head/net-im/libmesode: . files
Message-ID:  <202007121916.06CJG2CP071890@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: ashish
Date: Sun Jul 12 19:16:02 2020
New Revision: 542090
URL: https://svnweb.freebsd.org/changeset/ports/542090

Log:
  - Import a patch from upstream to fix bug related to SSL
    certificate verification in Profanity
  
  PR:		247871
  Approved by:	arved (maintainer)
  MFH:		2020Q3 (reliability fix blanket)

Added:
  head/net-im/libmesode/files/patch-src_tls__openssl.c   (contents, props changed)
Modified:
  head/net-im/libmesode/Makefile

Modified: head/net-im/libmesode/Makefile
==============================================================================
--- head/net-im/libmesode/Makefile	Sun Jul 12 18:29:09 2020	(r542089)
+++ head/net-im/libmesode/Makefile	Sun Jul 12 19:16:02 2020	(r542090)
@@ -2,6 +2,7 @@
 
 PORTNAME=	libmesode
 PORTVERSION=	0.9.3
+PORTREVISION=	1
 CATEGORIES=	net-im
 
 MAINTAINER=	arved@FreeBSD.org

Added: head/net-im/libmesode/files/patch-src_tls__openssl.c
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/net-im/libmesode/files/patch-src_tls__openssl.c	Sun Jul 12 19:16:02 2020	(r542090)
@@ -0,0 +1,14 @@
+Patch from:
+
+  https://github.com/profanity-im/libmesode/commit/532ed1e9d3e71e5bea0752e03dbacd4139d750d1
+
+--- src/tls_openssl.c.orig	2019-10-11 19:08:58 UTC
++++ src/tls_openssl.c
+@@ -320,6 +320,7 @@ tls_t *tls_new(xmpp_conn_t *conn)
+         SSL_CTX_set_client_cert_cb(tls->ssl_ctx, NULL);
+         SSL_CTX_set_mode(tls->ssl_ctx, SSL_MODE_ENABLE_PARTIAL_WRITE);
+         SSL_CTX_set_verify(tls->ssl_ctx, SSL_VERIFY_PEER, verify_callback);
++        SSL_CTX_set_default_verify_paths(tls->ssl_ctx);
+         if (conn->tls_cert_path) {
+             SSL_CTX_load_verify_locations(tls->ssl_ctx, NULL, conn->tls_cert_path);
+         }



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202007121916.06CJG2CP071890>