Add a patch to use system-wide crypto-policies (RHBZ #1179277)

This commit is contained in:
Athmane Madjoudj 2015-02-27 20:05:18 +01:00
parent c22b8229bb
commit 07db86d5b8
2 changed files with 32 additions and 1 deletions

View file

@ -0,0 +1,26 @@
diff -ru aria2-1.18.10/src/LibgnutlsTLSSession.cc aria2-1.18.10.patched/src/LibgnutlsTLSSession.cc
--- aria2-1.18.10/src/LibgnutlsTLSSession.cc 2015-02-23 15:34:01.000000000 +0100
+++ aria2-1.18.10.patched/src/LibgnutlsTLSSession.cc 2015-02-27 19:49:13.649873035 +0100
@@ -127,20 +127,8 @@
// It seems err is not error message, but the argument string
// which causes syntax error.
const char* err;
- std::string pri = "SECURE128";
- switch(tlsContext_->getMinTLSVersion()) {
- case TLS_PROTO_TLS12:
- pri += ":-VERS-TLS1.1";
- // fall through
- case TLS_PROTO_TLS11:
- pri += ":-VERS-TLS1.0";
- // fall through
- case TLS_PROTO_TLS10:
- pri += ":-VERS-SSL3.0";
- default:
- break;
- };
- rv_ = gnutls_priority_set_direct(sslSession_, pri.c_str(), &err);
+ rv_ = gnutls_priority_set_direct(sslSession_, "@SYSTEM", &err);
+
if(rv_ != GNUTLS_E_SUCCESS) {
return TLS_ERR_ERROR;
}

View file

@ -2,12 +2,13 @@
Name: aria2 Name: aria2
Version: 1.18.10 Version: 1.18.10
Release: 1%{?dist} Release: 2%{?dist}
Summary: High speed download utility with resuming and segmented downloading Summary: High speed download utility with resuming and segmented downloading
Group: Applications/Internet Group: Applications/Internet
License: GPLv2+ with exceptions License: GPLv2+ with exceptions
URL: http://aria2.sourceforge.net/ URL: http://aria2.sourceforge.net/
Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.xz Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.xz
Patch0: aria2-1.18.10-use-system-wide-crypto-policies.patch
BuildRequires: bison BuildRequires: bison
BuildRequires: c-ares-devel cppunit-devel BuildRequires: c-ares-devel cppunit-devel
BuildRequires: gettext gnutls-devel BuildRequires: gettext gnutls-devel
@ -37,6 +38,7 @@ Currently it has following features:
%prep %prep
%setup -q %setup -q
%patch0 -p1
%build %build
%configure --enable-bittorrent \ %configure --enable-bittorrent \
@ -66,6 +68,9 @@ rm -rf $RPM_BUILD_ROOT%{_datadir}/doc/%{name}
%{_mandir}/*/man1/aria2c.1.gz %{_mandir}/*/man1/aria2c.1.gz
%changelog %changelog
* Fri Feb 27 2015 Athmane Madjoudj <athmane@fedoraproject.org> 1.18.10-2
- Add a patch to use system-wide crypto-policies (RHBZ #1179277)
* Fri Feb 27 2015 Athmane Madjoudj <athmane@fedoraproject.org> 1.18.10-1 * Fri Feb 27 2015 Athmane Madjoudj <athmane@fedoraproject.org> 1.18.10-1
- Update to 1.18.10 (RHBZ #1123979) - Update to 1.18.10 (RHBZ #1123979)