diff options
| author | schmonz <schmonz@pkgsrc.org> | 2019-01-18 18:18:38 +0000 |
|---|---|---|
| committer | schmonz <schmonz@pkgsrc.org> | 2019-01-18 18:18:38 +0000 |
| commit | c94c4c102272dc8e05edaca823e783400dada239 (patch) | |
| tree | 8ff6b1087f98b8832d095159896eeec209deef08 | |
| parent | 96a14ad949738913957774fe1421363f1f3f24f2 (diff) | |
| download | pkgsrc-c94c4c102272dc8e05edaca823e783400dada239.tar.gz | |
Previous attempt at sensible default ciphers was insufficiently
interoperable. Use Postfix's `tls_medium_cipherlist` instead. Bump
PKGREVISION.
| -rw-r--r-- | net/ucspi-ssl/Makefile | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/net/ucspi-ssl/Makefile b/net/ucspi-ssl/Makefile index 5f6a438ce6f..6058f156f9d 100644 --- a/net/ucspi-ssl/Makefile +++ b/net/ucspi-ssl/Makefile @@ -1,9 +1,9 @@ -# $NetBSD: Makefile,v 1.27 2019/01/17 18:41:52 schmonz Exp $ +# $NetBSD: Makefile,v 1.28 2019/01/18 18:18:38 schmonz Exp $ # DISTNAME= ucspi-ssl-0.10.7 PKGNAME= ${DISTNAME:S/-0./-0.999./} -PKGREVISION= 1 +PKGREVISION= 2 CATEGORIES= net MASTER_SITES= https://www.fehcom.de/ipnet/ucspi-ssl/ EXTRACT_SUFX= .tgz @@ -51,9 +51,10 @@ DJB_CONFIG_CMDS= \ ${ECHO} > conf-ssl; \ ${ECHO} ${SSLDIR}/certs > conf-cadir; \ ${ECHO} ${PKG_SYSCONFDIR}/dh1024.pem > conf-dhfile; \ - ${ECHO} ${DEFAULT_CIPHERS} > conf-ciphers; + ${ECHO} ${DEFAULT_MEDIUM_CIPHERS} > conf-ciphers; -DEFAULT_CIPHERS= EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 +# from `postconf -d | grep tls_medium_cipherlist` +DEFAULT_MEDIUM_CIPHERS= aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH .include "../../mk/bsd.prefs.mk" |