From d343076c587984d1f86e7770d4e6242f7cb1c966 Mon Sep 17 00:00:00 2001 From: Adam Osuchowski Date: Tue, 21 Oct 2014 14:46:56 +0200 Subject: [PATCH] - zlib, sslv2 and sslv3 enabled by default --- openssl.spec | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/openssl.spec b/openssl.spec index 9ae870c..339271f 100644 --- a/openssl.spec +++ b/openssl.spec @@ -3,9 +3,9 @@ # # Conditional build: %bcond_without tests # don't perform "make tests" -%bcond_with zlib # zlib: note - enables CVE-2012-4929 vulnerability -%bcond_with sslv2 # SSLv2: note - many flaws http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_2.0 -%bcond_with sslv3 # SSLv3: note - enables CVE-2014-3566 vulnerability +%bcond_without zlib # zlib: note - enables CVE-2012-4929 vulnerability +%bcond_without sslv2 # SSLv2: note - many flaws http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_2.0 +%bcond_without sslv3 # SSLv3: note - enables CVE-2014-3566 vulnerability %bcond_with purify # Compile openssl with \-DPURIFY, useful when one wants to # use valgrind debugger against openssl-linked programs -- 2.44.0