From ae77f7fc825244059727b9198cadaf3ca255452d Mon Sep 17 00:00:00 2001
From: jorton <jorton@fedoraproject.org>
Date: May 29 2009 10:31:22 +0000
Subject: - trust V1 CA certs by default (#502451)


---

diff --git a/neon-0.28.4-trustv1ca.patch b/neon-0.28.4-trustv1ca.patch
new file mode 100644
index 0000000..4125035
--- /dev/null
+++ b/neon-0.28.4-trustv1ca.patch
@@ -0,0 +1,14 @@
+
+https://bugzilla.redhat.com/show_bug.cgi?id=502451
+
+--- neon-0.28.4/src/ne_gnutls.c.trustv1ca
++++ neon-0.28.4/src/ne_gnutls.c
+@@ -574,6 +574,8 @@ ne_ssl_context *ne_ssl_context_create(in
+         gnutls_certificate_client_set_retrieve_function(ctx->cred,
+                                                         provide_client_cert);
+     }
++    gnutls_certificate_set_verify_flags(ctx->cred, 
++                                        GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT);
+     return ctx;
+ }
+ 
diff --git a/neon.spec b/neon.spec
index 406bb06..3bcf00c 100644
--- a/neon.spec
+++ b/neon.spec
@@ -1,12 +1,13 @@
 Summary: An HTTP and WebDAV client library
 Name: neon
 Version: 0.28.4
-Release: 1%{?dist}
+Release: 1.1%{?dist}
 License: LGPLv2+
 Group: System Environment/Libraries
 URL: http://www.webdav.org/neon/
 Source0: http://www.webdav.org/neon/neon-%{version}.tar.gz
 Patch0: neon-0.27.0-multilib.patch
+Patch1: neon-0.28.4-trustv1ca.patch
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildRequires: expat-devel, gnutls-devel, zlib-devel, krb5-devel
 BuildRequires: pkgconfig, pakchois-devel
@@ -33,6 +34,7 @@ The development library for the C language HTTP and WebDAV client library.
 %prep
 %setup -q
 %patch0 -p1 -b .multilib
+%patch1 -p1 -b .trustv1ca
 
 %build
 export CC="%{__cc} -pthread"
@@ -75,12 +77,14 @@ rm -rf $RPM_BUILD_ROOT
 %{_libdir}/*.so
 
 %changelog
+* Fri May 29 2009 Joe Orton <jorton@redhat.com> 0.28.4-1.1
+- trust V1 CA certs by default (#502451)
+
 * Fri Mar  6 2009 Joe Orton <jorton@redhat.com> 0.28.4-1
 - update to 0.28.4
-- use install-p in "make install" (Robert Scheck, #226189)
 
-* Tue Feb  3 2009 Joe Orton <jorton@redhat.com> 0.28.3-2.1
-- GnuTLS fixes from upstream (#445044)
+* Mon Jan 19 2009 Joe Orton <jorton@redhat.com> 0.28.3-3
+- use install-p in "make install" (Robert Scheck, #226189)
 
 * Thu Aug 28 2008 Joe Orton <jorton@redhat.com> 0.28.3-2
 - update to 0.28.3