Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Oct 2014 08:39:56 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 194400] New: [PATCH] security/libressl 2.1.0 does not support EC ciphers in Apache24 and nginx
Message-ID:  <bug-194400-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194400

            Bug ID: 194400
           Summary: [PATCH] security/libressl 2.1.0 does not support EC
                    ciphers in Apache24 and nginx
           Product: Ports Tree
           Version: Latest
          Hardware: Any
                OS: Any
            Status: Needs Triage
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: vsevolod@FreeBSD.org
          Reporter: spil.oss@gmail.com
          Assignee: vsevolod@FreeBSD.org
             Flags: maintainer-feedback?(vsevolod@FreeBSD.org)

Created attachment 148366
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=148366&action=edit
ssl/t1_lib.c patch for files directory

LibreSSL 2.1.0 removes elliptic curve ciphers in at least Apache 2.4 and nginx
This has been reported on libressl-portable in GitHub
https://github.com/libressl-portable/portable/issues/35
and has been fixed by OpenBSD 
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libssl/src/ssl/t1_lib.c

This patch is the diff between the 2.1.0 tarball and this version 1.64 of
t1_lib.c

Tested on amd64 and verified that the ECDHE ciphers are available in Apache 2.4
from ports

--- Comment #1 from Bugzilla Automation <bugzilla@FreeBSD.org> ---
Auto-assigned to maintainer vsevolod@FreeBSD.org

-- 
You are receiving this mail because:
You are the assignee for the bug.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-194400-13>