summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Black <dragonheart@gentoo.org>2008-11-18 11:56:26 +0000
committerDaniel Black <dragonheart@gentoo.org>2008-11-18 11:56:26 +0000
commit623a6d99f55805cea3acc2e719d3987f1f9738f0 (patch)
treed8d288d77cc5e120feec363e55b4a42cd4d9dc8f /net-libs/gnutls/files
parentfixed cve patch as per bug #246976 - thanks parafin (diff)
downloadhistorical-623a6d99f55805cea3acc2e719d3987f1f9738f0.tar.gz
historical-623a6d99f55805cea3acc2e719d3987f1f9738f0.tar.bz2
historical-623a6d99f55805cea3acc2e719d3987f1f9738f0.zip
cleanup and stable
Package-Manager: portage-2.2_rc14/cvs/Linux 2.6.25-gentoo-r7 x86_64
Diffstat (limited to 'net-libs/gnutls/files')
-rw-r--r--net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989.patch38
1 files changed, 0 insertions, 38 deletions
diff --git a/net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989.patch b/net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989.patch
deleted file mode 100644
index fc4d80f2544c..000000000000
--- a/net-libs/gnutls/files/gnutls-2.2.5-CVE-2008-4989.patch
+++ /dev/null
@@ -1,38 +0,0 @@
---- gnutls-2.4.1/lib/x509/verify.c.orig 2008-07-01 06:45:51.000000000 +1000
-+++ gnutls-2.4.1/lib/x509/verify.c 2008-11-07 16:48:08.000000000 +1100
-@@ -376,6 +376,17 @@
- int i = 0, ret;
- unsigned int status = 0, output;
-
-+ /* Check if the last certificate in the path is self signed.
-+ * In that case ignore it (a certificate is trusted only if it
-+ * leads to a trusted party by us, not the server's).
-+ */
-+ if (gnutls_x509_crt_check_issuer (certificate_list[clist_size - 1],
-+ certificate_list[clist_size - 1]) > 0
-+ && clist_size > 0)
-+ {
-+ clist_size--;
-+ }
-+
- /* Verify the last certificate in the certificate path
- * against the trusted CA certificate list.
- *
-@@ -414,17 +425,6 @@
- }
- #endif
-
-- /* Check if the last certificate in the path is self signed.
-- * In that case ignore it (a certificate is trusted only if it
-- * leads to a trusted party by us, not the server's).
-- */
-- if (gnutls_x509_crt_check_issuer (certificate_list[clist_size - 1],
-- certificate_list[clist_size - 1]) > 0
-- && clist_size > 0)
-- {
-- clist_size--;
-- }
--
- /* Verify the certificate path (chain)
- */
- for (i = clist_size - 1; i > 0; i--)