ports/54280: Update Port: security/sslwrap

Gea-Suan Lin gslin at netnews.NCTU.edu.tw
Wed Jul 9 21:20:20 UTC 2003


>Number:         54280
>Category:       ports
>Synopsis:       Update Port: security/sslwrap
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jul 09 14:20:16 PDT 2003
>Closed-Date:
>Last-Modified:
>Originator:     Gea-Suan Lin
>Release:        FreeBSD 4.8-RELEASE i386
>Organization:
>Environment:
System: FreeBSD netnews.NCTU.edu.tw 4.8-RELEASE FreeBSD 4.8-RELEASE #5: Mon May 26 02:55:15 CST 2003 root at netnews.NCTU.edu.tw:/usr/obj/usr/src/sys/NETNEWS i386


	
>Description:
	Update s_server.c by the following instruction from the changelog of
	www.openssl.org:

	*) New option SSL_OP_CIPHER_SERVER_PREFERENCE allows the server to override
	   the clients preferred ciphersuites and rather use its own preferences.
	   Should help to work around M$ SGC (Server Gated Cryptography) bug in
	   Internet Explorer by ensuring unchanged hash method during stepup.
	   (Also replaces the broken/deactivated SSL_OP_NON_EXPORT_FIRST option.)
	   [Lutz Jaenicke]

	And bump PORTREVISION.
	
>How-To-Repeat:
	
>Fix:

diff -ruN /usr/ports/security/sslwrap/Makefile sslwrap/Makefile
--- /usr/ports/security/sslwrap/Makefile	Thu May  8 03:13:35 2003
+++ sslwrap/Makefile	Thu Jul 10 05:02:47 2003
@@ -7,6 +7,7 @@
 
 PORTNAME=	sslwrap
 PORTVERSION=	2.0.6
+PORTREVISION=	1
 CATEGORIES=	security
 MASTER_SITES=	http://www.quiltaholic.com/rickk/sslwrap/
 DISTNAME=	${PORTNAME}
@@ -14,11 +15,13 @@
 MAINTAINER=	ZGabor at CoDe.HU
 COMMENT=	Another SSL Wrapper application, which uses SSLEay/OpenSSL
 
-BROKEN=		"Does not compile"
-
 USE_OPENSSL=	YES
+USE_REINPLACE=	YES
 
 WRKSRC=		${WRKDIR}/${PORTNAME}${PORTVERSION:S/.//g}
+
+post-patch:
+	${REINPLACE_CMD} -e 's/SSL_OP_NON_EXPORT_FIRST/SSL_OP_CIPHER_SERVER_PREFERENCE/g' ${WRKSRC}/s_server.c
 
 do-install:
 	${INSTALL_PROGRAM} ${WRKSRC}/sslwrap ${PREFIX}/bin/sslwrap
	


>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-ports-bugs mailing list