From d15918de21bde76868d9108099fe82e87b6a4a7f Mon Sep 17 00:00:00 2001 From: Carlos Alberto Lopez Perez Date: Fri, 6 Mar 2015 07:33:11 +0000 Subject: [PATCH] Don't use a SSL3.0 record version in client hello =================================================================== Gbp-Pq: Name no-ssl-record-version.patch --- .../NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp | 2 +- Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp b/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp index c42baa8e94..1acd133c7d 100644 --- a/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp +++ b/Source/WebKit2/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp @@ -39,7 +39,7 @@ int main(int argc, char** argv) // overwrite this priority string if it's already set by the user. // Keep this in sync with WebProcessMain.cpp. // https://bugzilla.gnome.org/show_bug.cgi?id=738633 - setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:!VERS-SSL3.0", 0); + setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:%LATEST_RECORD_VERSION:!VERS-SSL3.0", 0); return NetworkProcessMainUnix(argc, argv); } diff --git a/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp b/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp index 260620a766..87b45b3c5c 100644 --- a/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp +++ b/Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp @@ -39,7 +39,7 @@ int main(int argc, char** argv) // overwrite this priority string if it's already set by the user. // Keep this in sync with NetworkProcessMain.cpp. // https://bugzilla.gnome.org/show_bug.cgi?id=738633 - setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:!VERS-SSL3.0", 0); + setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:%LATEST_RECORD_VERSION:!VERS-SSL3.0", 0); return WebProcessMainUnix(argc, argv); } -- 2.30.2