[SyncEvolution] User TLS instead of SSLv3 in syncevolution-http-server
- First Post
- Replies
- Stats
-
Go to
- ----- 2022 -----
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
Hi,
the attached patch switches the syncevo-http-server script from using
SSLv3 to TLS. This avoids the potential security risk that arises with
SSLv3 and also fixes connections problems with clients not supporting
SSLv3 anymore. The latter is the case with syncevolution in Debian
Jessie, as it uses gnutls with disabled SSLv3 support.
Regards,
Tino
Attachments:
- 0001-Use-TLS-instead-of-SSLv3.patch (text/x-diff — 1.0 KB)
On Thu, 2014-12-04 at 17:14 +0100, Tino Mettler wrote:
the attached patch switches the syncevo-http-server script from
using
SSLv3 to TLS. This avoids the potential security risk that arises with
SSLv3 and also fixes connections problems with clients not supporting
SSLv3 anymore. The latter is the case with syncevolution in Debian
Jessie, as it uses gnutls with disabled SSLv3 support.
Looks good to me. I'll merge it into master and include in a 1.5.1
update.
--
Best Regards, Patrick Ohly
The content of this message is my personal opinion only and although
I am an employee of Intel, the statements I make here in no way
represent Intel's position on the issue, nor am I authorized to speak
on behalf of Intel on this matter.
2837
days inactive
2845
days old
syncevolution@synevolution.org
1 comments
2 participants
tags (0)
participants (2)
-
Patrick Ohly -
Tino Mettler