Tue Mar 29 22:00:14 2016 UTC ()
Remove SSLv2 support. Bump revision.


(joerg)
diff -r1.30 -r1.31 pkgsrc/security/openvas-client/Makefile
diff -r1.3 -r1.4 pkgsrc/security/openvas-client/distinfo
diff -r0 -r1.1 pkgsrc/security/openvas-client/patches/patch-nessus_nessus.c

cvs diff -r1.30 -r1.31 pkgsrc/security/openvas-client/Attic/Makefile (expand / switch to unified diff)

--- pkgsrc/security/openvas-client/Attic/Makefile 2016/03/05 11:29:23 1.30
+++ pkgsrc/security/openvas-client/Attic/Makefile 2016/03/29 22:00:13 1.31
@@ -1,18 +1,18 @@ @@ -1,18 +1,18 @@
1# $NetBSD: Makefile,v 1.30 2016/03/05 11:29:23 jperkin Exp $ 1# $NetBSD: Makefile,v 1.31 2016/03/29 22:00:13 joerg Exp $
2# 2#
3 3
4DISTNAME= openvas-client-2.0.1 4DISTNAME= openvas-client-2.0.1
5PKGREVISION= 25 5PKGREVISION= 26
6CATEGORIES= security 6CATEGORIES= security
7MASTER_SITES= http://wald.intevation.org/frs/download.php/552/ 7MASTER_SITES= http://wald.intevation.org/frs/download.php/552/
8 8
9MAINTAINER= pkgsrc-users@NetBSD.org 9MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= http://www.openvas.org/ 10HOMEPAGE= http://www.openvas.org/
11COMMENT= Client for the Open Vulnerability Assessment System 11COMMENT= Client for the Open Vulnerability Assessment System
12 12
13USE_TOOLS+= gmake pkg-config 13USE_TOOLS+= gmake pkg-config
14GNU_CONFIGURE= YES 14GNU_CONFIGURE= YES
15BUILD_DEFS+= VARBASE 15BUILD_DEFS+= VARBASE
16USE_X11= YES 16USE_X11= YES
17 17
18CONFIGURE_ARGS+= --localstatedir=${VARBASE} 18CONFIGURE_ARGS+= --localstatedir=${VARBASE}

cvs diff -r1.3 -r1.4 pkgsrc/security/openvas-client/Attic/distinfo (expand / switch to unified diff)

--- pkgsrc/security/openvas-client/Attic/distinfo 2015/11/04 01:17:52 1.3
+++ pkgsrc/security/openvas-client/Attic/distinfo 2016/03/29 22:00:13 1.4
@@ -1,7 +1,8 @@ @@ -1,7 +1,8 @@
1$NetBSD: distinfo,v 1.3 2015/11/04 01:17:52 agc Exp $ 1$NetBSD: distinfo,v 1.4 2016/03/29 22:00:13 joerg Exp $
2 2
3SHA1 (openvas-client-2.0.1.tar.gz) = 07ada2cb7538da072c27a3a1cf58f9c6152d5e64 3SHA1 (openvas-client-2.0.1.tar.gz) = 07ada2cb7538da072c27a3a1cf58f9c6152d5e64
4RMD160 (openvas-client-2.0.1.tar.gz) = aa966e1e9911b63e5fee48d947cda5f0b036dd0a 4RMD160 (openvas-client-2.0.1.tar.gz) = aa966e1e9911b63e5fee48d947cda5f0b036dd0a
5SHA512 (openvas-client-2.0.1.tar.gz) = b20235fb9b6d6355a01b02156f6b10b78c98e74e1ebcfac586167989c8175f347a8eaf6eab543a76556745ef4c6aaa88a6e63f984a081d55a7f496d6063fe892 5SHA512 (openvas-client-2.0.1.tar.gz) = b20235fb9b6d6355a01b02156f6b10b78c98e74e1ebcfac586167989c8175f347a8eaf6eab543a76556745ef4c6aaa88a6e63f984a081d55a7f496d6063fe892
6Size (openvas-client-2.0.1.tar.gz) = 629551 bytes 6Size (openvas-client-2.0.1.tar.gz) = 629551 bytes
7SHA1 (patch-aa) = ffca8ce1116a4014e1a65f53536e0fc4faeeb675 7SHA1 (patch-aa) = ffca8ce1116a4014e1a65f53536e0fc4faeeb675
 8SHA1 (patch-nessus_nessus.c) = 9c2e10a8abe410db8c9b8a7a575dd6cfdbec5804

File Added: pkgsrc/security/openvas-client/patches/Attic/patch-nessus_nessus.c
$NetBSD: patch-nessus_nessus.c,v 1.1 2016/03/29 22:00:14 joerg Exp $

--- nessus/nessus.c.orig	2016-03-29 18:19:57.396124258 +0000
+++ nessus/nessus.c
@@ -410,9 +410,7 @@ Please launch openvasclient-mkrand(1) fi
 	}
       if (ssl_mt == NULL)
 	{
-	  if (strcasecmp(ssl_ver, "SSLv2") == 0)
-	    ssl_mt = SSLv2_client_method();
-	  else if (strcasecmp(ssl_ver, "SSLv3") == 0)
+	  if (strcasecmp(ssl_ver, "SSLv3") == 0)
 	    ssl_mt = SSLv3_client_method();
 	  else if (strcasecmp(ssl_ver, "SSLv23") == 0)
 	    ssl_mt = SSLv23_client_method();
@@ -443,6 +441,7 @@ Please launch openvasclient-mkrand(1) fi
 	    return "SSL error";
 	  }
 
+      SSL_CTX_set_options(ssl_ctx, SSL_OP_NO_SSLv2);
       if (SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL) < 0)
 	sslerror("SSL_CTX_set_options(SSL_OP_ALL)");