bcollet/socat
1
0
Fork 0
mirror of https://repo.or.cz/socat.git synced 2024-12-23 07:52:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Red Hat issue 1019964: socat now uses the system certificate store

Browse source
This commit is contained in:
Gerhard Rieger 2015-04-02 16:00:46 +02:00
parent 78497ff3c7
commit 066dac0812
2 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
CHANGES
View file

@ -32,6 +32,10 @@ security:
Red Hat issue 1019964: socat now uses the system certificate store with Red Hat issue 1019964: socat now uses the system certificate store with
OPENSSL when neither options cafile nor capath are used OPENSSL when neither options cafile nor capath are used
Red Hat issue 1019972: needs to specify OpenSSL cipher suites
Default cipherlist is now "HIGH:-NULL:-PSK:-aNULL" instead of empty to
prevent downgrade attacks
corrections: corrections:
LISTEN based addresses applied some address options, e.g. so-keepalive, LISTEN based addresses applied some address options, e.g. so-keepalive,
to the listening file descriptor instead of the connected file to the listening file descriptor instead of the connected file

2
xio-openssl.c
View file

@ -852,7 +852,7 @@ int
bool opt_fips = false; bool opt_fips = false;
const SSL_METHOD *method; const SSL_METHOD *method;
char *me_str = NULL; /* method string */ char *me_str = NULL; /* method string */
char *ci_str = NULL; /* cipher string */ char *ci_str = "HIGH:-NULL:-PSK:-aNULL"; /* cipher string */
char *opt_key = NULL; /* file name of client private key */ char *opt_key = NULL; /* file name of client private key */
char *opt_dhparam = NULL; /* file name of DH params */ char *opt_dhparam = NULL; /* file name of DH params */
char *opt_cafile = NULL; /* certificate authority file */ char *opt_cafile = NULL; /* certificate authority file */