diff -Nru xchat-2.8.8/debian/changelog xchat-2.8.8/debian/changelog --- xchat-2.8.8/debian/changelog 2013-12-26 23:25:10.000000000 +0100 +++ xchat-2.8.8/debian/changelog 2014-10-15 23:58:21.000000000 +0200 @@ -1,6 +1,13 @@ +xchat (2.8.8-7.1ubuntu5.1) trusty; urgency=medium + + * debian/patches/sslv23_method.patch: enable TLS 1.x, disable + SSLv2/SSLv3 + + -- Whoopie Wed, 15 Oct 2014 23:56:54 +0200 + xchat (2.8.8-7.1ubuntu5) trusty; urgency=medium - * Update config.guess/config.sub with dh_atotools. + * Update config.guess/config.sub with dh_autotools. -- Dimitri John Ledkov Thu, 26 Dec 2013 22:25:10 +0000 diff -Nru xchat-2.8.8/debian/patches/series xchat-2.8.8/debian/patches/series --- xchat-2.8.8/debian/patches/series 2013-12-26 22:53:42.000000000 +0100 +++ xchat-2.8.8/debian/patches/series 2014-10-15 23:32:19.000000000 +0200 @@ -34,3 +34,4 @@ power-user-settings.patch fix-ftbfs-missing-gmodule.patch automake-foreign.patch +sslv23_method.patch diff -Nru xchat-2.8.8/debian/patches/sslv23_method.patch xchat-2.8.8/debian/patches/sslv23_method.patch --- xchat-2.8.8/debian/patches/sslv23_method.patch 1970-01-01 01:00:00.000000000 +0100 +++ xchat-2.8.8/debian/patches/sslv23_method.patch 2014-10-15 23:50:07.000000000 +0200 @@ -0,0 +1,22 @@ +--- a/src/common/ssl.c ++++ b/src/common/ssl.c +@@ -70,8 +70,9 @@ + + SSLeay_add_ssl_algorithms (); + SSL_load_error_strings (); +- ctx = SSL_CTX_new (server ? SSLv3_server_method() : SSLv3_client_method ()); ++ ctx = SSL_CTX_new (server ? SSLv23_server_method() : SSLv23_client_method ()); + ++ SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3); + SSL_CTX_set_session_cache_mode (ctx, SSL_SESS_CACHE_BOTH); + SSL_CTX_set_timeout (ctx, 300); + +@@ -281,7 +282,7 @@ + __SSL_critical_error ("SSL_new"); + + SSL_set_fd (ssl, sd); +- if (ctx->method == SSLv3_client_method()) ++ if (ctx->method == SSLv23_client_method()) + SSL_set_connect_state (ssl); + else + SSL_set_accept_state(ssl);