[Bug 194400] New: [PATCH] security/libressl 2.1.0 does not support EC ciphers in Apache24 and nginx

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Oct 16 08:39:57 UTC 2014


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194400

            Bug ID: 194400
           Summary: [PATCH] security/libressl 2.1.0 does not support EC
                    ciphers in Apache24 and nginx
           Product: Ports Tree
           Version: Latest
          Hardware: Any
                OS: Any
            Status: Needs Triage
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: vsevolod at FreeBSD.org
          Reporter: spil.oss at gmail.com
          Assignee: vsevolod at FreeBSD.org
             Flags: maintainer-feedback?(vsevolod at FreeBSD.org)

Created attachment 148366
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=148366&action=edit
ssl/t1_lib.c patch for files directory

LibreSSL 2.1.0 removes elliptic curve ciphers in at least Apache 2.4 and nginx
This has been reported on libressl-portable in GitHub
https://github.com/libressl-portable/portable/issues/35
and has been fixed by OpenBSD 
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libssl/src/ssl/t1_lib.c

This patch is the diff between the 2.1.0 tarball and this version 1.64 of
t1_lib.c

Tested on amd64 and verified that the ECDHE ciphers are available in Apache 2.4
from ports

--- Comment #1 from Bugzilla Automation <bugzilla at FreeBSD.org> ---
Auto-assigned to maintainer vsevolod at FreeBSD.org

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list