mirror of
https://github.com/Stichting-MINIX-Research-Foundation/pkgsrc-ng.git
synced 2025-09-11 21:42:39 -04:00
21 lines
682 B
Perl
21 lines
682 B
Perl
$NetBSD: patch-lib_LWP_Protocol_https.pm,v 1.1 2014/05/15 10:17:38 wiz Exp $
|
|
|
|
Fix for CVE-2014-3230 from
|
|
https://github.com/libwww-perl/lwp-protocol-https/pull/14
|
|
|
|
--- lib/LWP/Protocol/https.pm.orig 2014-04-18 16:33:26.000000000 +0000
|
|
+++ lib/LWP/Protocol/https.pm
|
|
@@ -21,7 +21,11 @@ sub _extra_sock_opts
|
|
$ssl_opts{SSL_verifycn_scheme} = 'www';
|
|
}
|
|
else {
|
|
- $ssl_opts{SSL_verify_mode} = 0;
|
|
+ if ( $Net::HTTPS::SSL_SOCKET_CLASS eq 'Net::SSL' ) {
|
|
+ $ssl_opts{SSL_verifycn_scheme} = '';
|
|
+ } else {
|
|
+ $ssl_opts{SSL_verifycn_scheme} = 'none';
|
|
+ }
|
|
}
|
|
if ($ssl_opts{SSL_verify_mode}) {
|
|
unless (exists $ssl_opts{SSL_ca_file} || exists $ssl_opts{SSL_ca_path}) {
|