Untested patch to change the default for Firefox:
Index: www/firefox/Makefile
===================================================================
--- www/firefox/Makefile (revision 370893)
+++ www/firefox/Makefile (working copy)
@@ -4,6 +4,7 @@
PORTNAME= firefox
DISTVERSION= 32.0.3
DISTVERSIONSUFFIX=.source
+PORTREVISION= 1
PORTEPOCH= 1
CATEGORIES= www ipv6
MASTER_SITES= MOZILLA/${PORTNAME}/releases/${DISTVERSION}/source \
Index: www/firefox/files/patch-disable-ssl3
===================================================================
--- www/firefox/files/patch-disable-ssl3 (revision 0)
+++ www/firefox/files/patch-disable-ssl3 (working copy)
@@ -0,0 +1,22 @@
+--- netwerk/base/public/security-prefs.js.orig
++++ netwerk/base/public/security-prefs.js
+@@ -2,7 +2,7 @@
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+-pref("security.tls.version.min", 0);
++pref("security.tls.version.min", 1);
+ pref("security.tls.version.max", 3);
+
+
pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref",
false);
+--- security/manager/ssl/src/nsNSSComponent.cpp.orig
++++ security/manager/ssl/src/nsNSSComponent.cpp
+@@ -1076,7 +1076,7 @@ nsresult
+ nsNSSComponent::setEnabledTLSVersions()
+ {
+ // keep these values in sync with security-prefs.js
+- static const int32_t PSM_DEFAULT_MIN_TLS_VERSION = 0;
++ static const int32_t PSM_DEFAULT_MIN_TLS_VERSION = 1;
+ static const int32_t PSM_DEFAULT_MAX_TLS_VERSION = 3;
+
+ int32_t minVersion = Preferences::GetInt("security.tls.version.min",
Property changes on: www/firefox/files/patch-disable-ssl3
___________________________________________________________________
Added: svn:mime-type
## -0,0 +1 ##
+text/plain
\ No newline at end of property
Added: fbsd:nokeywords
## -0,0 +1 ##
+yes
\ No newline at end of property
Added: svn:eol-style
## -0,0 +1 ##
+native
\ No newline at end of property
DES
--
Dag-Erling Smørgrav - [email protected]
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-gecko
To unsubscribe, send any mail to "[email protected]"
