Disabled SSLv[2-3] in default configuration.

diff --git a/exim.spec b/exim.spec
index 43cc32376b89159b6aeabdc5317c559bd1284dde..7515d59345b8be51caa04f085c70ef244e650f66 100644 (file)
--- a/exim.spec
+++ b/exim.spec
@@ -22,7 +22,7 @@ Summary(pl.UTF-8):    Agent Transferu Poczty Uniwersytetu w Cambridge
 Summary(pt_BR.UTF-8):  Servidor de correio eletrônico exim
 Name:          exim
 Version:       4.85
-Release:       1
+Release:       2
 Epoch:         2
 License:       GPL
 Group:         Networking/Daemons/SMTP
@@ -58,6 +58,7 @@ Patch5:               localscan_dlopen_%{name}_4.20_or_better.patch
 Patch8:                %{name}-spam-timeout.patch
 
 Patch10:       %{name}-force-sigalrm.patch
+Patch11:       %{name}4-disableSSLv3.patch
 URL:           http://www.exim.org/
 %{?with_sasl:BuildRequires:    cyrus-sasl-devel >= 2.1.0}
 BuildRequires: db-devel
@@ -176,10 +177,9 @@ Pliki nagłówkowe dla Exima.
 %patch8 -p1
 
 %patch10 -p1
-
 install %{SOURCE4} exim4.conf
 install %{SOURCE14} doc/config.samples.tar.bz2
-
+%patch11 -p1
 install -d Local
 cat << 'EOF' >> Local/Makefile-Linux
 CC=%{__cc}

diff --git a/exim4-disableSSLv3.patch b/exim4-disableSSLv3.patch
new file mode 100644 (file)
index 0000000..c89756d
--- /dev/null
+++ b/exim4-disableSSLv3.patch
@@ -0,0 +1,12 @@
+diff -urN eximorg/exim4.conf exim/exim4.conf
+--- eximorg/exim4.conf 2015-01-13 09:39:15.705251985 +0100
++++ exim/exim4.conf    2015-01-13 09:43:24.017910803 +0100
+@@ -70,6 +70,8 @@
+ # tls_privatekey = /etc/openssl/mail.key
+ # tls_advertise_hosts = *
+ 
++openssl_options = +no_sslv2 +no_sslv3
++
+ # You can use self-signed cerficates (you will need openssl-tools package):
+ 
+ # openssl genrsa -out /etc/openssl/mail.key 1024