On Wed, Feb 26, 2020 at 09:23:15AM +1100, Ross L Richardson wrote:
> 
> On Tue, Feb 25, 2020 at 11:04:23PM +0100, Alex Naumov wrote:
> > this patch updates libircclient to version 1.10.
> > 
> > 'make test' and 'make port-lib-depends-check' and 'portcheck' are OK.
> >[...]
> >  HOMEPAGE =         http://www.ulduzsoft.com/linux/libircclient/
> 
> Home page could/should be https:
>       https://www.ulduzsoft.com/linux/libircclient/
> >[...]
> 
> Ross

I sent an update to this port on 11/01/2018. I stated that the library
didn't work with SSL connections on OpenBSD because the library was
failing to set the context option for SSL_OP_NO_SSLv2. It contained a
patch to fix that problem.

https://marc.info/?l=openbsd-ports&m=154108115405734&w=2

Testing this update and the failure still exists. Anyone else tested
this with SSl?

Patch is below.
-- 

Tracey Emery

$OpenBSD$

Index: src/ssl.c
--- src/ssl.c.orig
+++ src/ssl.c
@@ -127,9 +127,10 @@ static int ssl_init_context( irc_session_t * session )
                return LIBIRC_ERR_SSL_INIT_FAILED;
 
        // Disable SSLv2 as it is unsecure
+#if !defined(__OpenBSD__)
        if ( (SSL_CTX_set_options( ssl_context, SSL_OP_NO_SSLv2) & 
SSL_OP_NO_SSLv2) == 0 )
                return LIBIRC_ERR_SSL_INIT_FAILED;
-
+#endif
        // Enable only strong ciphers
        if ( SSL_CTX_set_cipher_list( ssl_context, 
"ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH" ) != 1 )
                return LIBIRC_ERR_SSL_INIT_FAILED;

Reply via email to