/[smeserver]/rpms/smeserver-dovecot/sme9/smeserver-dovecot-1.4.0-ssl_proto_from_db.patch
ViewVC logotype

Contents of /rpms/smeserver-dovecot/sme9/smeserver-dovecot-1.4.0-ssl_proto_from_db.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.1 - (show annotations) (download)
Thu Jan 7 17:30:38 2016 UTC (8 years, 4 months ago) by vip-ire
Branch: MAIN
CVS Tags: smeserver-dovecot-1_4_0-20_el6_sme, smeserver-dovecot-1_4_0-19_el6_sme, smeserver-dovecot-1_4_0-21_el6_sme, HEAD
* Thu Jan 7 2016 Daniel Berteaud <daniel@firewall-services.com> - 1.4.0-19.sme
- Allow settings SSL protocols from DB (and set TLSv1 back to enabled
  on a default install) [SME: 9175]

1 diff -Nur smeserver-dovecot-1.4.0/root/etc/e-smith/templates/etc/dovecot/dovecot.conf/35ssl smeserver-dovecot-1.4.0_bz9175/root/etc/e-smith/templates/etc/dovecot/dovecot.conf/35ssl
2 --- smeserver-dovecot-1.4.0/root/etc/e-smith/templates/etc/dovecot/dovecot.conf/35ssl 2016-01-07 18:15:59.107793994 +0100
3 +++ smeserver-dovecot-1.4.0_bz9175/root/etc/e-smith/templates/etc/dovecot/dovecot.conf/35ssl 2016-01-07 18:27:11.189800678 +0100
4 @@ -1,4 +1,13 @@
5 ssl = {$OUT .= (($imaps{'status'} || 'enabled') eq 'enabled') ? 'yes':'no';}
6 ssl_cert = </var/service/dovecot/ssl/imapd.pem
7 ssl_key = </var/service/dovecot/ssl/imapd.pem
8 -ssl_protocols = !SSLv2 !SSLv3 !TLSv1
9 +{
10 +
11 +my $proto = '';
12 +$proto .= ' !SSLv2' unless ($dovecot{'SSLv2'} || 'disabled') eq 'enabled';
13 +$proto .= ' !SSLv3' unless ($dovecot{'SSLv3'} || 'disabled') eq 'enabled';
14 +$proto .= ' !TLSv1' unless ($dovecot{'TLSv1'} || 'enabled') eq 'enabled';
15 +
16 +$OUT .= "ssl_protocols =$proto\n" if ($proto ne '');
17 +
18 +}

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed