From: Thomas Deutschmann <whissi@gentoo.org>
Date: Sat, 23 Feb 2019 16:21:57 +0000 (+0100)
Subject: net-ftp/pure-ftpd: disable TLSv1.1
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=f520f42c189ee5fa4cf20f9e6eaa22eb4e77f069;p=gentoo.git

net-ftp/pure-ftpd: disable TLSv1.1

Package-Manager: Portage-2.3.62, Repoman-2.3.12
Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
---

diff --git a/net-ftp/pure-ftpd/files/pure-ftpd-1.0.47-disable-TLSv1.1.patch b/net-ftp/pure-ftpd/files/pure-ftpd-1.0.47-disable-TLSv1.1.patch
new file mode 100644
index 000000000000..cd4532bb97ab
--- /dev/null
+++ b/net-ftp/pure-ftpd/files/pure-ftpd-1.0.47-disable-TLSv1.1.patch
@@ -0,0 +1,22 @@
+From aa68b2d620ef0c83c7f52213c7e6093722b0b8bd Mon Sep 17 00:00:00 2001
+From: Frank Denis <github@pureftpd.org>
+Date: Wed, 24 Oct 2018 19:19:26 +0200
+Subject: [PATCH] Disable TLSv1_1
+
+---
+ src/tls.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/tls.c b/src/tls.c
+index f383ed9..c4e2a1b 100644
+--- a/src/tls.c
++++ b/src/tls.c
+@@ -297,7 +297,7 @@ int tls_init_library(void)
+     SSL_CTX_set_options(tls_ctx, SSL_OP_NO_TLSv1);
+ # endif
+ # ifdef SSL_OP_NO_TLSv1_1
+-    SSL_CTX_clear_options(tls_ctx, SSL_OP_NO_TLSv1_1);
++    SSL_CTX_set_options(tls_ctx, SSL_OP_NO_TLSv1_1);
+ # endif
+ # ifdef SSL_OP_NO_TLSv1_2
+     SSL_CTX_clear_options(tls_ctx, SSL_OP_NO_TLSv1_2);
diff --git a/net-ftp/pure-ftpd/pure-ftpd-1.0.47-r4.ebuild b/net-ftp/pure-ftpd/pure-ftpd-1.0.47-r4.ebuild
index 485065724467..7091bdd479ed 100644
--- a/net-ftp/pure-ftpd/pure-ftpd-1.0.47-r4.ebuild
+++ b/net-ftp/pure-ftpd/pure-ftpd-1.0.47-r4.ebuild
@@ -45,6 +45,7 @@ PATCHES=(
 	"${FILESDIR}/${PN}-1.0.47-MAX_DATA_SIZE.patch"
 	"${FILESDIR}/${PN}-1.0.47-TLSv1.3.patch"
 	"${FILESDIR}/${PN}-1.0.47-disable-TLSv1.3.patch"
+	"${FILESDIR}/${PN}-1.0.47-disable-TLSv1.1.patch"
 )
 
 src_configure() {