[patch] Allow building tn5250 without SSLv2/SSLv3 support

Hi,

we recently patched the OpenBSD tn5250 port to build it without SSLv3
support.  We had already patched it to cope with the SSLv2 removal from
LibreSSL.

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/net/tn5250/patches/patch-src_sslstream_c

Here's a patch against the 0.17.4 release.  I tried to checkout the CVS
repo but it appears to be unavailable.

Cheers,

diff -pru tn5250-0.17.4.orig/lib5250/sslstream.c tn5250-0.17.4/lib5250/sslstream.c
--- tn5250-0.17.4.orig/lib5250/sslstream.c	Fri Nov 21 01:12:21 2008
+++ tn5250-0.17.4/lib5250/sslstream.c	Sat Jul 25 19:32:50 2015
@@ -369,11 +369,21 @@ int tn5250_ssl_stream_init (Tn5250Stream *This)
    }
 
    if (!strcmp(methstr, "ssl2")) {
+#ifndef OPENSSL_NO_SSL2
         meth = SSLv2_client_method();         
         TN5250_LOG(("SSL Method = SSLv2_client_method()\n"));
+#else
+        TN5250_LOG(("SSL: SSLv2 support requested but not available"));
+        return -1;
+#endif
    } else if (!strcmp(methstr, "ssl3")) {
+#ifndef OPENSSL_NO_SSL3
         meth = SSLv3_client_method();         
         TN5250_LOG(("SSL Method = SSLv3_client_method()\n"));
+#else
+        TN5250_LOG(("SSL: SSLv3 support requested but not available"));
+        return -1;
+#endif
    } else {
         meth = SSLv23_client_method();         
         TN5250_LOG(("SSL Method = SSLv23_client_method()\n"));


-- 
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF  DDCC 0DFA 74AE 1524 E7EE
-- 
This is the Linux 5250 Development Project (LINUX5250) mailing list
To post a message email: LINUX5250-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/linux5250
or email: LINUX5250-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/linux5250.