[Pkg-voip-commits] [asterisk] 02/10: Revert "add fix for ASTERISK-24711 (enable DTLS read ahead)"

Bernhard Schmidt berni at moszumanska.debian.org
Sun Oct 23 19:48:53 UTC 2016


This is an automated email from the git hooks/post-receive script.

berni pushed a commit to branch jessie
in repository asterisk.

commit d2195490a69b12c97f95a8f733bf29e1ec34d33b
Author: Bernhard Schmidt <berni at debian.org>
Date:   Tue Oct 11 16:56:17 2016 +0200

    Revert "add fix for ASTERISK-24711 (enable DTLS read ahead)"
    
    This reverts commit db637ff2d09fbb7ccf5162aa7bbbb4215cb1fb7f never present in Jessie
---
 debian/patches/enable_dtls_read_ahead.patch | 28 ----------------------------
 debian/patches/series                       |  1 -
 2 files changed, 29 deletions(-)

diff --git a/debian/patches/enable_dtls_read_ahead.patch b/debian/patches/enable_dtls_read_ahead.patch
deleted file mode 100644
index e47b66a..0000000
--- a/debian/patches/enable_dtls_read_ahead.patch
+++ /dev/null
@@ -1,28 +0,0 @@
-From: Jeremy Lainé <jeremy.laine at m4x.org>
-Subject: Fix DTLS when used with patched OpenSSL
-Bug: https://issues.asterisk.org/jira/browse/ASTERISK-24711
-
-A recent security fix for OpenSSL broke DTLS negotiation for many
-applications. This was caused by read ahead not being enabled when it
-should be. While a commit has gone into OpenSSL to force read ahead
-on for DTLS it may take some time for a release to be made and the
-change to be present in distributions (if at all). As enabling read
-ahead is a simple one line change this commit does that and fixes
-the issue.
-
-See also:
-https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775502
-
-diff --git a/res/res_rtp_asterisk.c b/res/res_rtp_asterisk.c
-index ec3f147..a638572 100644
---- a/res/res_rtp_asterisk.c
-+++ b/res/res_rtp_asterisk.c
-@@ -1260,6 +1260,8 @@ static int ast_rtp_dtls_set_configuration(struct ast_rtp_instance *instance, con
- 		return -1;
- 	}
- 
-+	SSL_CTX_set_read_ahead(rtp->ssl_ctx, 1);
-+
- 	rtp->dtls_verify = dtls_cfg->verify;
- 
- 	SSL_CTX_set_verify(rtp->ssl_ctx, (rtp->dtls_verify & AST_RTP_DTLS_VERIFY_FINGERPRINT) || (rtp->dtls_verify & AST_RTP_DTLS_VERIFY_CERTIFICATE) ?
diff --git a/debian/patches/series b/debian/patches/series
index 59d91bc..6802868 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -33,7 +33,6 @@ escape_manpage_hyphen.patch
 aelparse_enable.patch
 res_fax_bounds.patch
 neon_version_check.patch
-enable_dtls_read_ahead.patch
 
 AST-2014-012.patch
 AST-2014-014.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-voip/asterisk.git




More information about the Pkg-voip-commits mailing list