diff options
| author | Nick Hainke <vincent@systemli.org> | 2022-12-20 09:20:45 +0100 |
|---|---|---|
| committer | Nick Hainke <vincent@systemli.org> | 2022-12-21 14:27:06 +0100 |
| commit | 4ecd9d67e90651a8e93760bf0b5771f7057c74a8 (patch) | |
| tree | 2443e788f80ddfee66e7dde2d84a3d56e92f7e4d /lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch | |
| parent | 735cba83ce3851e0a6fdf279a51683ed9bd00481 (diff) | |
python3: fix ssl support by removing libressl patches
Remove libressl specific patches. With commit
("tools/libressl: update to 3.7.0") they are no longer needed,
rather they cause python3 to be compiled without working ssl-support.
Fixes: #20107
Suggested-by: Andre Heider <a.heider@gmail.com>
Signed-off-by: Nick Hainke <vincent@systemli.org>
Diffstat (limited to 'lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch')
| -rw-r--r-- | lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch | 27 |
1 files changed, 0 insertions, 27 deletions
diff --git a/lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch b/lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch deleted file mode 100644 index 7b47c111f..000000000 --- a/lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch +++ /dev/null @@ -1,27 +0,0 @@ ---- a/Modules/_ssl.c -+++ b/Modules/_ssl.c -@@ -67,6 +67,12 @@ - # error "OPENSSL_THREADS is not defined, Python requires thread-safe OpenSSL" - #endif - -+#ifdef LIBRESSL_VERSION_NUMBER -+static int SSL_CTX_get_security_level(const SSL_CTX *ctx) -+{ -+ return 1; -+} -+#endif - - - struct py_ssl_error_code { -@@ -169,7 +175,11 @@ extern const SSL_METHOD *TLSv1_2_method( - * Based on Hynek's excellent blog post (update 2021-02-11) - * https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/ - */ -+#ifndef LIBRESSL_VERSION_NUMBER - #define PY_SSL_DEFAULT_CIPHER_STRING "@SECLEVEL=2:ECDH+AESGCM:ECDH+CHACHA20:ECDH+AES:DHE+AES:!aNULL:!eNULL:!aDSS:!SHA1:!AESCCM" -+#else -+ #define PY_SSL_DEFAULT_CIPHER_STRING "ECDH+AESGCM:ECDH+CHACHA20:ECDH+AES:DHE+AES:!aNULL:!eNULL:!aDSS:!SHA1:!AESCCM" -+#endif - #ifndef PY_SSL_MIN_PROTOCOL - #define PY_SSL_MIN_PROTOCOL TLS1_2_VERSION - #endif |