diff options
| author | adamw <adamw@FreeBSD.org> | 2016-04-05 01:05:31 +0800 |
|---|---|---|
| committer | adamw <adamw@FreeBSD.org> | 2016-04-05 01:05:31 +0800 |
| commit | b1a0d1be2f45874447153f21329cbc8b0fcfab1c (patch) | |
| tree | 670b2ce7c183943f6a6e140c06f294b62b387e41 /UPDATING | |
| parent | fb30953b4b8d30a62389ddd8ea96b0976619fe8b (diff) | |
| download | freebsd-ports-gnome-b1a0d1be2f45874447153f21329cbc8b0fcfab1c.tar.gz freebsd-ports-gnome-b1a0d1be2f45874447153f21329cbc8b0fcfab1c.tar.zst freebsd-ports-gnome-b1a0d1be2f45874447153f21329cbc8b0fcfab1c.zip | |
Disable SSLv3 and enable TLSv1.1 and TLSv1.2.
This is a patch make by Debian's own Noah Meyerhans that disables SSLv3,
fixes or removes the tests that choke without SSLv3, and lets
IO::Socket::SSL choose the best TLS level rather than forcing it at
TLSv1.
I can't think of a responsible reason to allow re-enabling it as an
OPTION, so add a note to UPDATING warning people of the change and
referencing the below PR.
PORTREVISION bump.
PR: 208225
Submitted by: Sascha Holzleiter
Obtained from: https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7199
MFH: 2016Q2
Diffstat (limited to 'UPDATING')
| -rw-r--r-- | UPDATING | 9 |
1 files changed, 9 insertions, 0 deletions
@@ -5,6 +5,15 @@ they are unavoidable. You should get into the habit of checking this file for changes each time you update your ports collection, before attempting any port upgrades. +20160404: + AFFECTS: mail/spamassassin + AUTHOR: adamw@FreeBSD.org + + Support for SSLv3 has been removed from SpamAssassin, because + SSLv3 is a Bad Idea. No direct option is provided to re-enable it. + If your setup requires use of SSLv3, some instructions are available + in FreeBSD PR 208225. + 20160331: AFFECTS: security/clamav-unofficial-sigs AUTHOR: lukasz@wasikowski.net, sf@maxempire.com |