/[smeserver]/rpms/smeserver-dovecot/sme9/smeserver-dovecot-1.4.0-ssl_proto_from_db.patch
ViewVC logotype

Annotation of /rpms/smeserver-dovecot/sme9/smeserver-dovecot-1.4.0-ssl_proto_from_db.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.1 - (hide annotations) (download)
Thu Jan 7 17:30:38 2016 UTC (8 years, 9 months ago) by vip-ire
Branch: MAIN
CVS Tags: smeserver-dovecot-1_4_0-20_el6_sme, smeserver-dovecot-1_4_0-19_el6_sme, smeserver-dovecot-1_4_0-21_el6_sme, HEAD
* Thu Jan 7 2016 Daniel Berteaud <daniel@firewall-services.com> - 1.4.0-19.sme
- Allow settings SSL protocols from DB (and set TLSv1 back to enabled
  on a default install) [SME: 9175]

1 vip-ire 1.1 diff -Nur smeserver-dovecot-1.4.0/root/etc/e-smith/templates/etc/dovecot/dovecot.conf/35ssl smeserver-dovecot-1.4.0_bz9175/root/etc/e-smith/templates/etc/dovecot/dovecot.conf/35ssl
2     --- smeserver-dovecot-1.4.0/root/etc/e-smith/templates/etc/dovecot/dovecot.conf/35ssl 2016-01-07 18:15:59.107793994 +0100
3     +++ smeserver-dovecot-1.4.0_bz9175/root/etc/e-smith/templates/etc/dovecot/dovecot.conf/35ssl 2016-01-07 18:27:11.189800678 +0100
4     @@ -1,4 +1,13 @@
5     ssl = {$OUT .= (($imaps{'status'} || 'enabled') eq 'enabled') ? 'yes':'no';}
6     ssl_cert = </var/service/dovecot/ssl/imapd.pem
7     ssl_key = </var/service/dovecot/ssl/imapd.pem
8     -ssl_protocols = !SSLv2 !SSLv3 !TLSv1
9     +{
10     +
11     +my $proto = '';
12     +$proto .= ' !SSLv2' unless ($dovecot{'SSLv2'} || 'disabled') eq 'enabled';
13     +$proto .= ' !SSLv3' unless ($dovecot{'SSLv3'} || 'disabled') eq 'enabled';
14     +$proto .= ' !TLSv1' unless ($dovecot{'TLSv1'} || 'enabled') eq 'enabled';
15     +
16     +$OUT .= "ssl_protocols =$proto\n" if ($proto ne '');
17     +
18     +}

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed