Author: nbd
Date: 2014-10-18 11:17:31 +0200 (Sat, 18 Oct 2014)
New Revision: 42947

Added:
   trunk/package/libs/polarssl/patches/100-disable_sslv3.patch
Log:
polarssl: disable SSLv3 support, fixes CVE-2014-3566 (POODLE)

Signed-off-by: Felix Fietkau <[email protected]>

Added: trunk/package/libs/polarssl/patches/100-disable_sslv3.patch
===================================================================
--- trunk/package/libs/polarssl/patches/100-disable_sslv3.patch                 
        (rev 0)
+++ trunk/package/libs/polarssl/patches/100-disable_sslv3.patch 2014-10-18 
09:17:31 UTC (rev 42947)
@@ -0,0 +1,12 @@
+--- a/include/polarssl/config.h
++++ b/include/polarssl/config.h
+@@ -859,8 +859,8 @@
+  *           POLARSSL_SHA1_C
+  *
+  * Comment this macro to disable support for SSL 3.0
+- */
+ #define POLARSSL_SSL_PROTO_SSL3
++ */
+ 
+ /**
+  * \def POLARSSL_SSL_PROTO_TLS1
_______________________________________________
openwrt-commits mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-commits

Reply via email to