aboutsummaryrefslogtreecommitdiffstats
path: root/package/libs
diff options
context:
space:
mode:
authorFelix Fietkau <nbd@openwrt.org>2014-10-18 09:17:31 +0000
committerFelix Fietkau <nbd@openwrt.org>2014-10-18 09:17:31 +0000
commit44a7d8e7e61d5a1d865df9fe68e4432fe6a43fb0 (patch)
tree9fde4186d1d04af601b72e03898db399a55f792c /package/libs
parent93e7f9f6113474ac98ef37ba2fefea6bafb5ff3f (diff)
downloadupstream-44a7d8e7e61d5a1d865df9fe68e4432fe6a43fb0.tar.gz
upstream-44a7d8e7e61d5a1d865df9fe68e4432fe6a43fb0.tar.bz2
upstream-44a7d8e7e61d5a1d865df9fe68e4432fe6a43fb0.zip
polarssl: disable SSLv3 support, fixes CVE-2014-3566 (POODLE)
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@42947 3c298f89-4303-0410-b956-a3cf2f4a3e73
Diffstat (limited to 'package/libs')
-rw-r--r--package/libs/polarssl/patches/100-disable_sslv3.patch12
1 files changed, 12 insertions, 0 deletions
diff --git a/package/libs/polarssl/patches/100-disable_sslv3.patch b/package/libs/polarssl/patches/100-disable_sslv3.patch
new file mode 100644
index 0000000000..06312f3471
--- /dev/null
+++ b/package/libs/polarssl/patches/100-disable_sslv3.patch
@@ -0,0 +1,12 @@
+--- a/include/polarssl/config.h
++++ b/include/polarssl/config.h
+@@ -859,8 +859,8 @@
+ * POLARSSL_SHA1_C
+ *
+ * Comment this macro to disable support for SSL 3.0
+- */
+ #define POLARSSL_SSL_PROTO_SSL3
++ */
+
+ /**
+ * \def POLARSSL_SSL_PROTO_TLS1