Changes - j0ke.net Open Build Service

[-] [+]	Changed	mod_security-ix.spec
@@ -1,7 +1,7 @@ Summary: Security module for the Apache HTTP Server Name: mod_security Version: 2.6.3 -Release: 23 +Release: 25 License: GPLv2 URL: http://www.modsecurity.org/ Group: System Environment/Daemons @@ -18,6 +18,7 @@ Source4: zzz_asl_custom_local_exclude.conf Source5: modsec-clamscan.pl Patch1: waf-label.patch +Patch2: mlogc-disable-force-sslv3.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) %if 0%{?rhel_version} \|\| 0%{?centos_version} \|\| 0%{?sl_version} \|\| 0%{?redhat_version} Requires: httpd httpd-mmn = %([ -a %{_includedir}/httpd/.mmn ] && cat %{_includedir}/httpd/.mmn \|\| echo missing) @@ -61,6 +62,7 @@ %prep %setup -n modsecurity-apache_%{version} %patch1 -p1 +%patch2 %build CFLAGS="%{optflags}"
[-] [+]	Added	mlogc-disable-force-sslv3.patch ^
@@ -0,0 +1,11 @@ +--- mlogc/mlogc.c.orig 2012-03-05 17:20:00.254555490 +0100 ++++ mlogc/mlogc.c 2012-03-05 17:20:10.430753985 +0100 +@@ -1214,7 +1214,7 @@ + curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, FALSE); + curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 0); + /* SSLv3 works better overall as some servers have issues with TLS / +- curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_SSLv3); ++ / curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_SSLv3); */ + curl_easy_setopt(curl, CURLOPT_CONNECTTIMEOUT, 15); + curl_easy_setopt(curl, CURLOPT_NOSIGNAL, TRUE); + curl_easy_setopt(curl, CURLOPT_HEADER, TRUE);