summaryrefslogtreecommitdiff
path: root/lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch
diff options
context:
space:
mode:
Diffstat (limited to 'lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch')
-rw-r--r--lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch27
1 files changed, 0 insertions, 27 deletions
diff --git a/lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch b/lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch
deleted file mode 100644
index 7b47c111f..000000000
--- a/lang/python/python3/patches/028-host-python-support-ssl-with-libressl.patch
+++ /dev/null
@@ -1,27 +0,0 @@
---- a/Modules/_ssl.c
-+++ b/Modules/_ssl.c
-@@ -67,6 +67,12 @@
- # error "OPENSSL_THREADS is not defined, Python requires thread-safe OpenSSL"
- #endif
-
-+#ifdef LIBRESSL_VERSION_NUMBER
-+static int SSL_CTX_get_security_level(const SSL_CTX *ctx)
-+{
-+ return 1;
-+}
-+#endif
-
-
- struct py_ssl_error_code {
-@@ -169,7 +175,11 @@ extern const SSL_METHOD *TLSv1_2_method(
- * Based on Hynek's excellent blog post (update 2021-02-11)
- * https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
- */
-+#ifndef LIBRESSL_VERSION_NUMBER
- #define PY_SSL_DEFAULT_CIPHER_STRING "@SECLEVEL=2:ECDH+AESGCM:ECDH+CHACHA20:ECDH+AES:DHE+AES:!aNULL:!eNULL:!aDSS:!SHA1:!AESCCM"
-+#else
-+ #define PY_SSL_DEFAULT_CIPHER_STRING "ECDH+AESGCM:ECDH+CHACHA20:ECDH+AES:DHE+AES:!aNULL:!eNULL:!aDSS:!SHA1:!AESCCM"
-+#endif
- #ifndef PY_SSL_MIN_PROTOCOL
- #define PY_SSL_MIN_PROTOCOL TLS1_2_VERSION
- #endif