diff options
| -rw-r--r-- | mongo-c-driver-crypto.patch | 2 | ||||
| -rw-r--r-- | mongo-c-driver.spec | 1 |
2 files changed, 2 insertions, 1 deletions
diff --git a/mongo-c-driver-crypto.patch b/mongo-c-driver-crypto.patch index e3cf7da..c9d1d94 100644 --- a/mongo-c-driver-crypto.patch +++ b/mongo-c-driver-crypto.patch @@ -11,7 +11,7 @@ diff -up ./src/mongoc/mongoc-ssl.c.old ./src/mongoc/mongoc-ssl.c - * @STRENGTH - Sort ciphers based on strength */ - SSL_CTX_set_cipher_list (ctx, "HIGH:!EXPORT:!aNULL@STRENGTH"); + /* See https://fedoraproject.org/wiki/Packaging:CryptoPolicies */ -+ SSL_CTX_set_cipher_list (ctx, "PROFILE=SYSTEM"); ++ /* SSL_CTX_set_cipher_list (ctx, "PROFILE=SYSTEM"); */ /* If renegotiation is needed, don't return from recv() or send() until it's successful. * Note: this is for blocking sockets only. */ diff --git a/mongo-c-driver.spec b/mongo-c-driver.spec index 2e6f3bf..3ae85fb 100644 --- a/mongo-c-driver.spec +++ b/mongo-c-driver.spec @@ -32,6 +32,7 @@ Source0: https://github.com/%{gh_owner}/%{gh_project}/releases/download/%{vers # Enforce system crypto policies # https://fedoraproject.org/wiki/Packaging:CryptoPolicies +# https://jira.mongodb.org/browse/CDRIVER-1231 Patch0: %{name}-crypto.patch BuildRequires: pkgconfig(openssl) |