|
 |
fa19501 |
From 9c1e3a75c81aa498231e59b1997a2408c580b879 Mon Sep 17 00:00:00 2001
|
|
|
fa19501 |
From: Jakub Filak <jfilak@redhat.com>
|
|
|
fa19501 |
Date: Tue, 4 Feb 2014 13:03:21 +0100
|
|
|
fa19501 |
Subject: [PATCH] retrace-client: stop failing on SSL2
|
|
|
fa19501 |
|
|
|
fa19501 |
Closes rhbz#1200852
|
|
|
fa19501 |
|
|
|
fa19501 |
Signed-off-by: Jakub Filak <jfilak@redhat.com>
|
|
|
fa19501 |
---
|
|
|
fa19501 |
src/plugins/https-utils.c | 9 +++++----
|
|
|
fa19501 |
1 file changed, 5 insertions(+), 4 deletions(-)
|
|
|
fa19501 |
|
|
|
fa19501 |
diff --git a/src/plugins/https-utils.c b/src/plugins/https-utils.c
|
|
|
fa19501 |
index cb3c606..7a22729 100644
|
|
|
fa19501 |
--- a/src/plugins/https-utils.c
|
|
|
fa19501 |
+++ b/src/plugins/https-utils.c
|
|
|
fa19501 |
@@ -213,12 +213,13 @@ void ssl_connect(struct https_cfg *cfg, PRFileDesc **tcp_sock, PRFileDesc **ssl_
|
|
|
fa19501 |
error_msg_and_die(_("Failed to wrap TCP socket by SSL."));
|
|
|
fa19501 |
if (SECSuccess != SSL_OptionSet(*ssl_sock, SSL_HANDSHAKE_AS_CLIENT, PR_TRUE))
|
|
|
fa19501 |
error_msg_and_die(_("Failed to enable client handshake to SSL socket."));
|
|
|
fa19501 |
- if (SECSuccess != SSL_OptionSet(*ssl_sock, SSL_ENABLE_SSL2, PR_TRUE))
|
|
|
fa19501 |
- error_msg_and_die(_("Failed to enable client handshake to SSL socket."));
|
|
|
fa19501 |
+ // https://bugzilla.redhat.com/show_bug.cgi?id=1189952
|
|
|
fa19501 |
+ //if (SECSuccess != SSL_OptionSet(*ssl_sock, SSL_ENABLE_SSL2, PR_TRUE))
|
|
|
fa19501 |
+ // error_msg_and_die(_("Failed to enable SSL2."));
|
|
|
fa19501 |
if (SECSuccess != SSL_OptionSet(*ssl_sock, SSL_ENABLE_SSL3, PR_TRUE))
|
|
|
fa19501 |
- error_msg_and_die(_("Failed to enable client handshake to SSL socket."));
|
|
|
fa19501 |
+ error_msg_and_die(_("Failed to enable SSL3."));
|
|
|
fa19501 |
if (SECSuccess != SSL_OptionSet(*ssl_sock, SSL_ENABLE_TLS, PR_TRUE))
|
|
|
fa19501 |
- error_msg_and_die(_("Failed to enable client handshake to SSL socket."));
|
|
|
fa19501 |
+ error_msg_and_die(_("Failed to enable TLS."));
|
|
|
fa19501 |
if (SECSuccess != SSL_SetURL(*ssl_sock, cfg->url))
|
|
|
fa19501 |
error_msg_and_die(_("Failed to set URL to SSL socket."));
|
|
|
fa19501 |
|
|
|
fa19501 |
--
|
|
|
fa19501 |
2.1.0
|
|
|
fa19501 |
|