--- rpms/e-smith-ldap/sme9/e-smith-ldap.spec	2016/02/05 15:40:28	1.25
+++ rpms/e-smith-ldap/sme9/e-smith-ldap.spec	2017/02/23 10:52:44	1.26
@@ -1,10 +1,10 @@
-# $Id: e-smith-ldap.spec,v 1.22 2016/01/17 20:43:12 vip-ire Exp $
+# $Id: e-smith-ldap.spec,v 1.25 2016/02/05 15:40:28 stephdl Exp $
 
 Summary: e-smith server and gateway - LDAP module
 %define name e-smith-ldap
 Name: %{name}
 %define version 5.4.0
-%define release 20
+%define release 21
 Version: %{version}
 Release: %{release}%{?dist}
 License: GPL
@@ -28,6 +28,7 @@ Patch15: e-smith-ldap-5.4.0-symlink_init
 Patch16: e-smith-ldap-5.4.0-pdbedit_lang_and_tz_independent.patch
 Patch17: e-smith-ldap-5.4.0-sizelimit_unlimited.patch
 Patch18: e-smith-ldap-5.4.0-ssl_update.patch
+Patch19: e-smith-ldap-5.4.0-strong_encryption.patch
 BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
 BuildArchitectures: noarch
 Requires: e-smith-base
@@ -45,6 +46,10 @@ AutoReqProv: no
 e-smith server and gateway software - LDAP module.
 
 %changelog
+* Thu Feb 23 2017 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-21.sme
+- Disable SSLv3, but keep the possibility to enable it again [SME: 10113]
+- Better default cipher suite, and honor global suite [SME: 10113]
+
 * Sun Jan 17 2016 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-20.sme
 - Hook into the new ssl-update event [SME: 9152]
 
@@ -1019,6 +1024,7 @@ e-smith server and gateway software - LD
 %patch16 -p1
 %patch17 -p1
 %patch18 -p1
+%patch19 -p1
 
 %build
 perl createlinks