polarssl: disable SSLv3 support, fixes CVE-2014-3566 (POODLE)

Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 42947
10 years ago · e5daecce98
parent 45d2e6d5a0
commit e5daecce98
1 changed files with 12 additions and 0 deletions
--- a/package/libs/polarssl/patches/100-disable_sslv3.patch
+++ b/package/libs/polarssl/patches/100-disable_sslv3.patch
@ -0,0 +1,12 @@
+--- a/include/polarssl/config.h
+++ b/include/polarssl/config.h
+@@ -859,8 +859,8 @@
+  *           POLARSSL_SHA1_C
+  *
+  * Comment this macro to disable support for SSL 3.0
+- */
+ #define POLARSSL_SSL_PROTO_SSL3
+ */
+ 
+ /**
+  * \def POLARSSL_SSL_PROTO_TLS1