Mostly working, but not complete, port of openssl

[fedora-mingw.git] / openssl / openssl-0.9.8a-reuse-cipher-change.patch

diff --git a/openssl/openssl-0.9.8a-reuse-cipher-change.patch b/openssl/openssl-0.9.8a-reuse-cipher-change.patch
new file mode 100644 (file)
index 0000000..666688b
--- /dev/null
+++ b/openssl/openssl-0.9.8a-reuse-cipher-change.patch
@@ -0,0 +1,20 @@
+--- openssl-0.9.8a/ssl/ssl.h.cipher-change     2005-11-22 16:36:22.000000000 +0100
++++ openssl-0.9.8a/ssl/ssl.h   2005-12-15 11:28:05.000000000 +0100
+@@ -477,7 +477,7 @@
+ 
+ #define SSL_OP_MICROSOFT_SESS_ID_BUG                  0x00000001L
+ #define SSL_OP_NETSCAPE_CHALLENGE_BUG                 0x00000002L
+-#define SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG               0x00000008L
++#define SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG               0x00000008L /* can break some security expectations */
+ #define SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG            0x00000010L
+ #define SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER             0x00000020L
+ #define SSL_OP_MSIE_SSLV2_RSA_PADDING                 0x00000040L /* no effect since 0.9.7h and 0.9.8b */
+@@ -494,7 +494,7 @@
+ 
+ /* SSL_OP_ALL: various bug workarounds that should be rather harmless.
+  *             This used to be 0x000FFFFFL before 0.9.7. */
+-#define SSL_OP_ALL                                    0x00000FFFL
++#define SSL_OP_ALL                                    0x00000FF7L /* without SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG */
+ 
+ /* DTLS options */
+ #define SSL_OP_NO_QUERY_MTU                 0x00001000L