packages/net/ratched/patches/0001-Disable-non-IANA-TLS-extensions.patch
Ilya Lipnitskiy 5d8d4fbbcb
treewide: Run refresh on all packages
The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-20 16:02:15 -08:00

22 lines
624 B
Diff

From 70cef63e0c0ec15016cf7c52d5183ed864cc50c4 Mon Sep 17 00:00:00 2001
From: Toni Uhlig <matzeton@googlemail.com>
Date: Sun, 20 Sep 2020 13:58:05 +0200
Subject: [PATCH] Disable non IANA TLS extensions.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
---
openssl_clienthello.c | 2 ++
1 file changed, 2 insertions(+)
--- a/openssl_clienthello.c
+++ b/openssl_clienthello.c
@@ -93,7 +93,9 @@ static struct lookup_table_element_t kno
ELEMENT(TLSEXT_TYPE_certificate_authorities),
#endif
ELEMENT(TLSEXT_TYPE_renegotiate),
+#ifndef OPENSSL_NO_NEXTPROTONEG
ELEMENT(TLSEXT_TYPE_next_proto_neg),
+#endif
{ 0 }
};