diff options
author | Daniel Black <dragonheart@gentoo.org> | 2008-11-18 11:56:26 +0000 |
---|---|---|
committer | Daniel Black <dragonheart@gentoo.org> | 2008-11-18 11:56:26 +0000 |
commit | 92de2a6e434bd4af59fbc7eeda0ff442420c2d2e (patch) | |
tree | 794c9fa8e8fbd4af78e3c78d1b08a18a1411b4f5 /net-libs/gnutls/files | |
parent | fixed cve patch as per bug #246976 - thanks parafin (diff) | |
download | gentoo-2-92de2a6e434bd4af59fbc7eeda0ff442420c2d2e.tar.gz gentoo-2-92de2a6e434bd4af59fbc7eeda0ff442420c2d2e.tar.bz2 gentoo-2-92de2a6e434bd4af59fbc7eeda0ff442420c2d2e.zip |
cleanup and stable
(Portage version: 2.2_rc14/cvs/Linux 2.6.25-gentoo-r7 x86_64)
Diffstat (limited to 'net-libs/gnutls/files')
-rw-r--r-- | net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989.patch | 38 |
1 files changed, 0 insertions, 38 deletions
diff --git a/net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989.patch b/net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989.patch deleted file mode 100644 index fc4d80f2544c..000000000000 --- a/net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989.patch +++ /dev/null @@ -1,38 +0,0 @@ ---- gnutls-2.4.1/lib/x509/verify.c.orig 2008-07-01 06:45:51.000000000 +1000 -+++ gnutls-2.4.1/lib/x509/verify.c 2008-11-07 16:48:08.000000000 +1100 -@@ -376,6 +376,17 @@ - int i = 0, ret; - unsigned int status = 0, output; - -+ /* Check if the last certificate in the path is self signed. -+ * In that case ignore it (a certificate is trusted only if it -+ * leads to a trusted party by us, not the server's). -+ */ -+ if (gnutls_x509_crt_check_issuer (certificate_list[clist_size - 1], -+ certificate_list[clist_size - 1]) > 0 -+ && clist_size > 0) -+ { -+ clist_size--; -+ } -+ - /* Verify the last certificate in the certificate path - * against the trusted CA certificate list. - * -@@ -414,17 +425,6 @@ - } - #endif - -- /* Check if the last certificate in the path is self signed. -- * In that case ignore it (a certificate is trusted only if it -- * leads to a trusted party by us, not the server's). -- */ -- if (gnutls_x509_crt_check_issuer (certificate_list[clist_size - 1], -- certificate_list[clist_size - 1]) > 0 -- && clist_size > 0) -- { -- clist_size--; -- } -- - /* Verify the certificate path (chain) - */ - for (i = clist_size - 1; i > 0; i--) |