File: use-mbedTLS-default-cipher-list.patch

package info (click to toggle)
libgit2 1.8.4%2Bds-3~bpo12%2B1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm-backports
  • size: 60,536 kB
  • sloc: ansic: 201,403; sh: 1,598; python: 384; perl: 99; php: 65; makefile: 33
file content (28 lines) | stat: -rw-r--r-- 950 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
From: =?utf-8?q?Timo_R=C3=B6hling?= <roehling@debian.org>
Date: Wed, 27 Nov 2024 23:25:53 +0100
Subject: use mbedTLS default cipher list

---
 src/libgit2/streams/mbedtls.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/libgit2/streams/mbedtls.c b/src/libgit2/streams/mbedtls.c
index 1b27807..662686f 100644
--- a/src/libgit2/streams/mbedtls.c
+++ b/src/libgit2/streams/mbedtls.c
@@ -104,6 +104,7 @@ int git_mbedtls_stream_global_init(void)
 	 * is made, so we can never see the certificate and override it. */
 	mbedtls_ssl_conf_authmode(&mbedtls_config, MBEDTLS_SSL_VERIFY_OPTIONAL);
 
+#if 0
 	/* set the list of allowed ciphersuites */
 	ciphers_known = 0;
 	cipher_string = cipher_string_tmp = git__strdup(GIT_SSL_DEFAULT_CIPHERS);
@@ -127,6 +128,7 @@ int git_mbedtls_stream_global_init(void)
 		goto cleanup;
 	}
 	mbedtls_ssl_conf_ciphersuites(&mbedtls_config, ciphers_list);
+#endif
 
 	/* Seeding the random number generator */