[Pkg-nagios-changes] [pkg-nrpe] 01/02: Add patch to include @SECLEVEL=0 in ssl_cipher_list. Required for compatibility between OpenSSL < 1.1.0 and >= 1.1.0.

[Bas Couwenberg]

This is an automated email from the git hooks/post-receive script.

sebastic pushed a commit to branch stretch-backports
in repository pkg-nrpe.

commit 1ad708bfa4f99db1a6edfcddb152b664d09c60ed
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date:   Fri Jul 7 13:35:49 2017 +0200

    Add patch to include @SECLEVEL=0 in ssl_cipher_list. Required for compatibility between OpenSSL < 1.1.0 and >= 1.1.0.
---
 debian/changelog              |  7 +++++++
 debian/patches/seclevel.patch | 15 +++++++++++++++
 debian/patches/series         |  1 +
 3 files changed, 23 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index a3c32f8..f1caf0e 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+nagios-nrpe (3.1.1-1~bpo9+3) UNRELEASED; urgency=medium
+
+  * Add patch to include @SECLEVEL=0 in ssl_cipher_list.
+    Required for compatibility between OpenSSL < 1.1.0 and >= 1.1.0.
+
+ -- Bas Couwenberg <sebastic at debian.org>  Fri, 07 Jul 2017 13:34:42 +0200
+
 nagios-nrpe (3.1.1-1~bpo9+2) stretch-backports; urgency=medium
 
   * Reinstate 11_reproducible_dh.h.patch for reproducible dh.h.
diff --git a/debian/patches/seclevel.patch b/debian/patches/seclevel.patch
new file mode 100644
index 0000000..e130873
--- /dev/null
+++ b/debian/patches/seclevel.patch
@@ -0,0 +1,15 @@
+Description: Include @SECLEVEL=0 in ssl_cipher_list.
+ Required for compatibility between OpenSSL < 1.1.0 and >= 1.1.0.
+Author: Bas Couwenberg <sebastic at debian.org>
+Forwarded: not-needed
+
+--- a/sample-config/nrpe.cfg.in
++++ b/sample-config/nrpe.cfg.in
+@@ -222,6 +222,7 @@ connection_timeout=300
+ # will be changed to something like the example below in a later version of NRPE.
+ 
+ #ssl_cipher_list=ALL:!MD5:@STRENGTH
++ssl_cipher_list=ALL:!MD5:@STRENGTH:@SECLEVEL=0
+ #ssl_cipher_list=ALL:!aNULL:!eNULL:!SSLv2:!LOW:!EXP:!RC4:!MD5:@STRENGTH
+ 
+ # SSL Certificate and Private Key Files
diff --git a/debian/patches/series b/debian/patches/series
index 15e2844..3c738db 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
 02_nrpe.cfg_local-include_support_nrpe.d.patch
 07_warn_ssloption.patch
 11_reproducible_dh.h.patch
+seclevel.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-nagios/pkg-nrpe.git