aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFelix Fietkau <nbd@openwrt.org>2014-10-18 09:17:31 +0000
committerFelix Fietkau <nbd@openwrt.org>2014-10-18 09:17:31 +0000
commite5daecce98712707a567919352a1f0c93a6275bd (patch)
treea7d7cc31c590adbea6eb9e6538fcca051f0b5f99
parent45d2e6d5a07d71839436f29fd4035cb6687ddf5e (diff)
downloadupstream-e5daecce98712707a567919352a1f0c93a6275bd.tar.gz
upstream-e5daecce98712707a567919352a1f0c93a6275bd.tar.bz2
upstream-e5daecce98712707a567919352a1f0c93a6275bd.zip
polarssl: disable SSLv3 support, fixes CVE-2014-3566 (POODLE)
Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 42947
-rw-r--r--package/libs/polarssl/patches/100-disable_sslv3.patch12
1 files changed, 12 insertions, 0 deletions
diff --git a/package/libs/polarssl/patches/100-disable_sslv3.patch b/package/libs/polarssl/patches/100-disable_sslv3.patch
new file mode 100644
index 0000000000..06312f3471
--- /dev/null
+++ b/package/libs/polarssl/patches/100-disable_sslv3.patch
@@ -0,0 +1,12 @@
+--- a/include/polarssl/config.h
++++ b/include/polarssl/config.h
+@@ -859,8 +859,8 @@
+ * POLARSSL_SHA1_C
+ *
+ * Comment this macro to disable support for SSL 3.0
+- */
+ #define POLARSSL_SSL_PROTO_SSL3
++ */
+
+ /**
+ * \def POLARSSL_SSL_PROTO_TLS1