Blame openldap-nss-default-cipher-suite-always-selected.patch
|
 |
592250e |
MozNSS: default cipher suite always selected
|
|
|
592250e |
|
|
|
592250e |
Author: Tim Strobell <tim.strobell.ctr@nrl.navy.mil>
|
|
|
592250e |
Upstream ITS: #7285
|
|
|
592250e |
Upstream commit: 2c2bb2e7aee1b2167f383a8344985a1cf66aff3f
|
|
|
592250e |
Resolves: #828790
|
|
|
592250e |
|
|
|
592250e |
diff --git a/libraries/libldap/tls_m.c b/libraries/libldap/tls_m.c
|
|
|
592250e |
index 23d843c..b608551 100644
|
|
|
592250e |
--- a/libraries/libldap/tls_m.c
|
|
|
592250e |
+++ b/libraries/libldap/tls_m.c
|
|
|
592250e |
@@ -2218,12 +2218,13 @@ tlsm_deferred_ctx_init( void *arg )
|
|
|
592250e |
return -1;
|
|
|
592250e |
}
|
|
|
592250e |
|
|
|
592250e |
- if ( lt->lt_ciphersuite &&
|
|
|
592250e |
- tlsm_parse_ciphers( ctx, lt->lt_ciphersuite )) {
|
|
|
592250e |
- Debug( LDAP_DEBUG_ANY,
|
|
|
592250e |
- "TLS: could not set cipher list %s.\n",
|
|
|
592250e |
- lt->lt_ciphersuite, 0, 0 );
|
|
|
592250e |
- return -1;
|
|
|
592250e |
+ if ( lt->lt_ciphersuite ) {
|
|
|
592250e |
+ if ( tlsm_parse_ciphers( ctx, lt->lt_ciphersuite ) ) {
|
|
|
592250e |
+ Debug( LDAP_DEBUG_ANY,
|
|
|
592250e |
+ "TLS: could not set cipher list %s.\n",
|
|
|
592250e |
+ lt->lt_ciphersuite, 0, 0 );
|
|
|
592250e |
+ return -1;
|
|
|
592250e |
+ }
|
|
|
592250e |
} else if ( tlsm_parse_ciphers( ctx, "DEFAULT" ) ) {
|
|
|
592250e |
Debug( LDAP_DEBUG_ANY,
|
|
|
592250e |
"TLS: could not set cipher list DEFAULT.\n",
|
|
|
592250e |
--
|
|
|
592250e |
1.7.10.4
|
|
|
592250e |
|