tags 622011 patch
thanks

Hello,

Attached is the patch which was used in Ubuntu to fix this problem.
https://launchpad.net/ubuntu/+source/openvas-client/2.0.5-1ubuntu1
#! /bin/sh /usr/share/dpatch/dpatch-run
## Description: OpenSSL 1.0.0 removed SSLv2 support. Handle this case.
## Author: Ilya Barygin <bary...@gmail.com>
## Bug-Debian: http://bugs.debian.org/622011

@DPATCH@
diff -urNad openvas-client-2.0.5~/nessus/nessus.c 
openvas-client-2.0.5/nessus/nessus.c
--- openvas-client-2.0.5~/nessus/nessus.c       2011-08-21 17:55:01.000000000 
+0400
+++ openvas-client-2.0.5/nessus/nessus.c        2011-08-21 17:53:12.000000000 
+0400
@@ -481,9 +481,12 @@
        }
       if (ssl_mt == NULL)
        {
+#ifndef OPENSSL_NO_SSL2
          if (strcasecmp(ssl_ver, "SSLv2") == 0)
            ssl_mt = SSLv2_client_method();
+         else
+#endif
+         if (strcasecmp(ssl_ver, "SSLv3") == 0)
-         else if (strcasecmp(ssl_ver, "SSLv3") == 0)
            ssl_mt = SSLv3_client_method();
          else if (strcasecmp(ssl_ver, "SSLv23") == 0)
            ssl_mt = SSLv23_client_method();

Reply via email to