[Pkg-sympa-devel] Bug#783595: sympa: LDAP support for SSLv3 broken on Debian 8.0 ("Jessie")

Pierre BLONDEAU pierre.blondeau at unicaen.fr
Thu Jul 30 16:00:46 UTC 2015


Hi,

May be also change the default value to prevent bad futures configurations :

--- /usr/share/sympa/lib/List.pm	2015-07-30 17:43:41.286289215 +0200
+++ List.pm	2015-07-30 17:44:08.514026212 +0200
@@ -877,8 +877,8 @@
 									    'gettext_id' => 'use SSL (LDAPS)',
 									    'order' => 2.5,
 									},
-							      'ssl_version' => {'format' => ['sslv2','sslv3','tls'],
-										'default' => 'sslv3',
+							      'ssl_version' => {'format' => ['sslv2','sslv3','tlsv1'],
+										'default' => 'tlsv1',
 										'gettext_id' => 'SSL version',
 										'order' => 2.5,
 									    },
@@ -1001,8 +1001,8 @@
 									    'gettext_id' => 'use SSL (LDAPS)',
 									    'order' => 2.5,
 									},
-							      'ssl_version' => {'format' => ['sslv2','sslv3','tls'],
-										'default' => '',
+							      'ssl_version' => {'format' => ['sslv2','sslv3','tlsv1'],
+										'default' => 'tlsv1',
 										'gettext_id' => 'SSL version',
 										'order' => 2.5,
 									    },
@@ -1579,7 +1579,7 @@
     # include_ldap_2level_query.ssl_version, include_ldap_query.ssl_version
     'sslv2' => {'gettext_id' => 'SSL version 2'},
     'sslv3' => {'gettext_id' => 'SSL version 3'},
-    'tls'   => {'gettext_id' => 'TLS'},
+    'tlsv1'   => {'gettext_id' => 'TLSv1'},

     # editor.reception, owner_include.reception, owner.reception,
     # editor_include.reception

Regards

-- 
----------------------------------------------
Pierre BLONDEAU
Administrateur Systèmes & réseaux
Université de Caen
Laboratoire GREYC, Département d'informatique

tel	: 02 31 56 75 42
bureau	: Campus 2, Science 3, 406
----------------------------------------------


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2947 bytes
Desc: Signature cryptographique S/MIME
URL: <http://lists.alioth.debian.org/pipermail/pkg-sympa-devel/attachments/20150730/2120f60c/attachment.bin>


More information about the Pkg-sympa-devel mailing list