[pkgsrc/trunk]: pkgsrc/net/ucspi-ssl Override conf-ciphers with Qualys-satisf...

[schmonz <schmonz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/c361e2ec8799
branches:  trunk
changeset: 328225:c361e2ec8799
user:      schmonz <schmonz%pkgsrc.org@localhost>
date:      Thu Jan 17 18:41:52 2019 +0000

description:
Override conf-ciphers with Qualys-satisfactory defaults. Bump PKGREVISION.

diffstat:

 net/ucspi-ssl/Makefile |  8 ++++++--
 1 files changed, 6 insertions(+), 2 deletions(-)

diffs (26 lines):

diff -r dce70e2a4da3 -r c361e2ec8799 net/ucspi-ssl/Makefile
--- a/net/ucspi-ssl/Makefile    Thu Jan 17 18:40:07 2019 +0000
+++ b/net/ucspi-ssl/Makefile    Thu Jan 17 18:41:52 2019 +0000
@@ -1,8 +1,9 @@
-# $NetBSD: Makefile,v 1.26 2018/12/14 22:52:45 schmonz Exp $
+# $NetBSD: Makefile,v 1.27 2019/01/17 18:41:52 schmonz Exp $
 #
 
 DISTNAME=              ucspi-ssl-0.10.7
 PKGNAME=               ${DISTNAME:S/-0./-0.999./}
+PKGREVISION=           1
 CATEGORIES=            net
 MASTER_SITES=          https://www.fehcom.de/ipnet/ucspi-ssl/
 EXTRACT_SUFX=          .tgz
@@ -49,7 +50,10 @@
        ${ECHO} ${PREFIX}/bin > conf-tcpbin;                            \
        ${ECHO} > conf-ssl;                                             \
        ${ECHO} ${SSLDIR}/certs > conf-cadir;                           \
-       ${ECHO} ${PKG_SYSCONFDIR}/dh1024.pem > conf-dhfile;
+       ${ECHO} ${PKG_SYSCONFDIR}/dh1024.pem > conf-dhfile;             \
+       ${ECHO} ${DEFAULT_CIPHERS} > conf-ciphers;
+
+DEFAULT_CIPHERS=       
EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4
 
 .include "../../mk/bsd.prefs.mk"