From: Adam Osuchowski Date: Tue, 21 Oct 2014 12:46:56 +0000 (+0200) Subject: - zlib, sslv2 and sslv3 enabled by default X-Git-Tag: auto/th/openssl-1.0.1j-3~1 X-Git-Url: http://git.pld-linux.org/?p=packages%2Fopenssl.git;a=commitdiff_plain;h=d343076c587984d1f86e7770d4e6242f7cb1c966 - zlib, sslv2 and sslv3 enabled by default --- diff --git a/openssl.spec b/openssl.spec index 9ae870c..339271f 100644 --- a/openssl.spec +++ b/openssl.spec @@ -3,9 +3,9 @@ # # Conditional build: %bcond_without tests # don't perform "make tests" -%bcond_with zlib # zlib: note - enables CVE-2012-4929 vulnerability -%bcond_with sslv2 # SSLv2: note - many flaws http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_2.0 -%bcond_with sslv3 # SSLv3: note - enables CVE-2014-3566 vulnerability +%bcond_without zlib # zlib: note - enables CVE-2012-4929 vulnerability +%bcond_without sslv2 # SSLv2: note - many flaws http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_2.0 +%bcond_without sslv3 # SSLv3: note - enables CVE-2014-3566 vulnerability %bcond_with purify # Compile openssl with \-DPURIFY, useful when one wants to # use valgrind debugger against openssl-linked programs