|
 |
47a30d |
From 5c4e9f2017ba6c0415fe8352587db61dd9451ee4 Mon Sep 17 00:00:00 2001
|
|
|
47a30d |
From: Mark Reynolds <mreynolds@redhat.com>
|
|
|
47a30d |
Date: Mon, 20 Jan 2020 13:16:36 -0500
|
|
|
47a30d |
Subject: [PATCH] Issue 50834 - Incorrectly setting the NSS default SSL version
|
|
|
47a30d |
max
|
|
|
47a30d |
|
|
|
47a30d |
Description: We've been using the wrong function to get the NSS max
|
|
|
47a30d |
version We were calling SSL_VersionRangeGetSupported()
|
|
|
47a30d |
which gets the versions NSS "can" handle, but
|
|
|
47a30d |
SSL_VersionRangeGetDefault() gets the versions that
|
|
|
47a30d |
are actually "enabled".
|
|
|
47a30d |
|
|
|
47a30d |
relates: https://pagure.io/389-ds-base/issue/50834
|
|
|
47a30d |
|
|
|
47a30d |
Reviewed by: mreynolds(one line commit rule)
|
|
|
47a30d |
---
|
|
|
47a30d |
ldap/servers/slapd/ssl.c | 2 +-
|
|
|
47a30d |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
47a30d |
|
|
|
47a30d |
diff --git a/ldap/servers/slapd/ssl.c b/ldap/servers/slapd/ssl.c
|
|
|
47a30d |
index ed054db44..c71e3019b 100644
|
|
|
47a30d |
--- a/ldap/servers/slapd/ssl.c
|
|
|
47a30d |
+++ b/ldap/servers/slapd/ssl.c
|
|
|
47a30d |
@@ -1164,7 +1164,7 @@ slapd_nss_init(int init_ssl __attribute__((unused)), int config_available __attr
|
|
|
47a30d |
char *certdir;
|
|
|
47a30d |
char emin[VERSION_STR_LENGTH], emax[VERSION_STR_LENGTH];
|
|
|
47a30d |
/* Get the range of the supported SSL version */
|
|
|
47a30d |
- SSL_VersionRangeGetSupported(ssl_variant_stream, &enabledNSSVersions);
|
|
|
47a30d |
+ SSL_VersionRangeGetDefault(ssl_variant_stream, &enabledNSSVersions);
|
|
|
47a30d |
|
|
|
47a30d |
(void)slapi_getSSLVersion_str(enabledNSSVersions.min, emin, sizeof(emin));
|
|
|
47a30d |
(void)slapi_getSSLVersion_str(enabledNSSVersions.max, emax, sizeof(emax));
|
|
|
47a30d |
--
|
|
|
47a30d |
2.21.1
|
|
|
47a30d |
|