From owner-svn-ports-head@freebsd.org Wed Jan 13 17:56:31 2016 Return-Path: Delivered-To: svn-ports-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 99394A81038 for ; Wed, 13 Jan 2016 17:56:31 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7089218B5 for ; Wed, 13 Jan 2016 17:56:31 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 3F9B12208F for ; Wed, 13 Jan 2016 12:56:30 -0500 (EST) Received: from web6 ([10.202.2.216]) by compute4.internal (MEProxy); Wed, 13 Jan 2016 12:56:30 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=wEOkNTMw7vyYwLi rhOjJnCAIgJg=; b=oFDpMKjAiEMVsOd2y085xczp8zr+/QlS9aFdOXEXFLqU8Pz GhxqL5ITjFRn/DHji+8GPINJNio9utjoocHjumBLtDetISkDRAMTFh6UT5CJZ1Bk OgetTojjWfAX5J5hAuFPlzMWotLlae7kvpJuGS8j6ivbTSobL8wK3cKF4xPg= Received: by web6.nyi.internal (Postfix, from userid 99) id 15DBF4151E; Wed, 13 Jan 2016 12:56:30 -0500 (EST) Message-Id: <1452707787.2832948.491187474.31730688@webmail.messagingengine.com> X-Sasl-Enc: Gy+p+IhMTvGtJesuhem7hoWKj51zKJAHhgM8rRJ7xXga 1452707787 From: Mark Felder To: Bernard Spil , ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Cc: dinoex@FreeBSD.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-6cda141f In-Reply-To: <201601131729.u0DHTCQF040857@repo.freebsd.org> References: <201601131729.u0DHTCQF040857@repo.freebsd.org> Subject: Re: svn commit: r406060 - head/security/openssl Date: Wed, 13 Jan 2016 11:56:27 -0600 X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jan 2016 17:56:31 -0000 On Wed, Jan 13, 2016, at 11:29, Bernard Spil wrote: > Author: brnrd > Date: Wed Jan 13 17:29:12 2016 > New Revision: 406060 > URL: https://svnweb.freebsd.org/changeset/ports/406060 > > Log: > security/openssl: Fix No-SSLv3 option > > - This change adds `no-ssl3-method` to config args > - Bump portrevision > > Testing with security/openssl buillt with SSL3 option disabled [1] > revealed that the openssl binary and the libraries still support SSLv3 > connections and methods. With the added no-ssl3-method argument passed > to the config script, the binary no longer supports the -ssl3 option > and ports requiring SSLv3 methods fail on undefined references to > methods. > > PR: 203693 [1] > Reviewed by: koobs (mentor), feld (mentor, ports-secteam), dinoex > (maintainer) > Approved by: koobs (mentor), feld (mentor, ports-secteam > MFH: 2016Q1 > Differential Revision: D4924 > koobs and I (mentors) goofed up with the review process here. Dinoex as maintainer was not involved in the review or approval process, but we approved this commit and the commit log message. This change is a no-op for users who do not set SSL3=off. Sorry, dinoex :-) -- Mark Felder ports-secteam member feld@FreeBSD.org