adrian pushed to jabberd (master). "updated to 2.3.3"

[notifications at fedoraproject.org]

>From f4a2c2f5553bdb2681a6b55d8f83d12352abbb0f Mon Sep 17 00:00:00 2001
From: Adrian Reber <adrian at lisas.de>
Date: Tue, 14 Apr 2015 16:28:50 +0200
Subject: updated to 2.3.3


diff --git a/jabberd-fedora-crypto-policy.patch b/jabberd-fedora-crypto-policy.patch
index 769d3df..f0b4e35 100644
--- a/jabberd-fedora-crypto-policy.patch
+++ b/jabberd-fedora-crypto-policy.patch
@@ -1,10 +1,10 @@
 --- a/sx/ssl.c
 +++ b/sx/ssl.c
-@@ -912,7 +912,7 @@ int sx_ssl_server_addcert(sx_plugin_t p,
-     }
+@@ -1022,7 +1022,7 @@ int sx_ssl_server_addcert(sx_plugin_t p,
+      SSL_CTX_set_tmp_ecdh_callback(ctx, sx_ssl_tmp_ecdh_callback);
  
      // Set allowed ciphers
--	if (SSL_CTX_set_cipher_list(ctx, "ALL:!LOW:!SSLv2:!EXP:!aNULL") != 1) {
+-       if (SSL_CTX_set_cipher_list(ctx, "ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:HIGH:!MD5:!LOW:!SSLv2:!EXP:!aNULL:!EDH:!RC4") != 1) {
 +	if (SSL_CTX_set_cipher_list(ctx, "PROFILE=SYSTEM") != 1) {
          _sx_debug(ZONE, "Can't set cipher list for SSL context: %s", ERR_error_string(ERR_get_error(), NULL));
          SSL_CTX_free(ctx);
-- 
cgit v0.10.2


	http://pkgs.fedoraproject.org/cgit/jabberd.git/commit/?h=master&id=f4a2c2f5553bdb2681a6b55d8f83d12352abbb0f