- rel 9; fixes CVE-2017-16943

[packages/exim.git] / exim4-disableSSLv3.patch

diff --git a/exim4-disableSSLv3.patch b/exim4-disableSSLv3.patch
index c89756de9f4dbbeecf7b9dcc13bc589db36f212e..b3de65c199fe9678f23123cb60cdf969eb52c14c 100644 (file)
--- a/exim4-disableSSLv3.patch
+++ b/exim4-disableSSLv3.patch
@@ -1,12 +1,13 @@
 diff -urN eximorg/exim4.conf exim/exim4.conf
 --- eximorg/exim4.conf 2015-01-13 09:39:15.705251985 +0100
 +++ exim/exim4.conf    2015-01-13 09:43:24.017910803 +0100
-@@ -70,6 +70,8 @@
- # tls_privatekey = /etc/openssl/mail.key
- # tls_advertise_hosts = *
+@@ -145,6 +145,8 @@ acl_smtp_data = acl_check_data
+ # Disable TLS
+ tls_advertise_hosts =
  
 +openssl_options = +no_sslv2 +no_sslv3
 +
- # You can use self-signed cerficates (you will need openssl-tools package):
- 
- # openssl genrsa -out /etc/openssl/mail.key 1024
+ # Specify the location of the Exim server's TLS certificate and private key.
+ # The private key must not be encrypted (password protected). You can put
+ # the certificate and private key in the same file, in which case you only
+