Change cipher list recommendation

Package-Manager: portage-2.2.15/cvs/Linux x86_64
Manifest-Sign-Key: 0x77F1F175586A3B1F

3 files changed, 30 insertions, 31 deletions

diff --git a/net-mail/dovecot/ChangeLog b/net-mail/dovecot/ChangeLog
index 4be5d550210c..5e1f2034d63e 100644
--- a/net-mail/dovecot/ChangeLog
+++ b/net-mail/dovecot/ChangeLog
@@ -1,6 +1,9 @@
 # ChangeLog for net-mail/dovecot
 # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/ChangeLog,v 1.498 2014/12/04 08:55:35 eras Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/ChangeLog,v 1.499 2014/12/08 08:14:44 eras Exp $
+
+  08 Dec 2014; Eray Aslan <eras@gentoo.org> files/dovecot-10-ssl.patch:
+  Change cipher list recommendation
 
 *dovecot-2.2.15-r3 (04 Dec 2014)
 
diff --git a/net-mail/dovecot/Manifest b/net-mail/dovecot/Manifest
index 68ba2010044b..e906c52131e8 100644
--- a/net-mail/dovecot/Manifest
+++ b/net-mail/dovecot/Manifest
@@ -1,7 +1,7 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA256
 
-AUX dovecot-10-ssl.patch 675 SHA256 973d6736a13ac8e56618e1a4d1b0e7a4e47c44e792d542803745fd5f2aec6ae1 SHA512 a201cbc275dbe4182d26971cc1c90ece22c05455535b7e55241ac0e71d61233882ad088d127cca2d1cd0d82dc86b1731ec98570254e29b056315567a1fd4d4a7 WHIRLPOOL ac9f4762684713507d3f196b97d7de16d228ac3f7ebd69e759b13efcb86caba821a439a15df300c41fd9c22738aec651e92c300350228f878a9c205d28850f6c
+AUX dovecot-10-ssl.patch 550 SHA256 04e3fe4d9d974be45c60e461884ad6a0f76803370f9f538eb4ddbc5a788bd667 SHA512 7acc31dd4a3f51a9c13d590fd2803c2cb98c281e0595ca2a800539a143f89b95f923a3678beb0aa2b254a54385522329e0f3e1e8ba4c5852e7b51f8f111122a9 WHIRLPOOL 357aa348975d85fa861cbdca402104db5763cce271c8d20f26d6831dd2c5ab8e527c67f0d4110d21de3977ad8a184a2294ea00d81f3771c3a0a523d935283d8a
 AUX dovecot-pigeonhole-0.4.5.patch 651 SHA256 64625ee9e3d9156ad330aefe128fa7e0cd9f54109bea9dab99a1635fcf5e3e55 SHA512 b64fd368ba4186c278022534e19b22af4ed4a1bf585872738cc5dbc0a3a21c432298bfef3132047f7ef26e8e0e1743923ebed3a726f59c95c654d57552cf0c89 WHIRLPOOL deb0f5d750e2015bb4722b71cdd732aaf72b936f2f2f5c92c970e53622f79fd3fc4f44a13c1c0b81248b0fb04de47e477ac4fe0eadf9dab4ae4cc47fea230495
 AUX dovecot.init-r4 1609 SHA256 510ebab9dc59832502a9a23d48d12b6e81f3c51c52f5e6652b00b240f621d02e SHA512 9aa5040cd169bfa0dea382d839ef73454105d3befd1e904cef8d0a07eb260051f72f130ba250d716b9bf9b22af542907446e02c4ec92f1c229a2c0a9f560e2cc WHIRLPOOL 51726ed76100521e54470137dab9869537dcf49a58872614312295dff3efab53ac58da30b8bfaaf86677f47ef1e84019e47529226c0a736eed68cac6ce64ae40
 DIST dovecot-2.2-pigeonhole-0.4.2.tar.gz 1159311 SHA256 0499f07037b86489fdc1d48fb19e298d5360ec41273bccaec230eb1bcf5a3e13 SHA512 3b66d00a8462ee668b8671f5eaa48bb91d47ed8bf8b331f7d879ba8c581e2bef11e236b06a8c5da9f1248572348ad0b3e2b867fd0a17badf32152fedbe61c1ed WHIRLPOOL 4d86bd5c010434620d0741156d4b7b24c60252de76958c0fc774418abff4bebeb4a8a78b5490ee34b20d48f61fb2ee75c4ff04202108ecdd33e1eaa9e2763ad9
@@ -22,22 +22,22 @@ EBUILD dovecot-2.2.15-r2.ebuild 8937 SHA256 0e182fa2c5dc5dd1707d8656e87992e2a563
 EBUILD dovecot-2.2.15-r3.ebuild 8972 SHA256 882c30ab8586fad7e595c375b396c83f291c2731097c82459cc0f1a14c07e999 SHA512 419b1aacf4598a05c065dc55c85bee4de37a14dc4032f5913f8591b78c9dfa1558c6e24871c0ff7bbeb4cf9f68fdc0baae91fd9a80cb6d14f1390a30e8ae2da7 WHIRLPOOL 7351c87566a88b81200888d018ddc118a8aa5137fe71c38fc01f7200afb163a5dd735a8c104f164733f2d2060ac004a47e02ce24fa257abe3f98708befc71cb8
 EBUILD dovecot-2.2.15.ebuild 8930 SHA256 9e3acff5e766e4e15f0cf4b7f6e20f3c185510cfcb9284c8351da7b284e221ad SHA512 7d5218025e9edc09c55ef56c5d99eb4468f8917e74e9f953b65353719461b357dfa02567d2a0c5ec213ea67635cae9182f6fb2bedcb2150fe3b1daf1204624eb WHIRLPOOL d30ea936b2bcfbb102f4daacb33dbd357939112afbc48352e52c04002b10db83efad3343a35add5f3fd598fcf5a305a3109e252f0eddd3fc8edd56969ac32dd2
 EBUILD dovecot-2.2.9.ebuild 8621 SHA256 5fcf76456860701cda3cd442d8573ef8196a07d30df7c06684692069d42233c6 SHA512 fefd5aaed1344585753c4d8c9cfffc75661bd2c689ef09bd7b053b6fda9e33fd6dd00a5f8810d9140b1dbc48ca0537204822c332308d9333762a923888c494b8 WHIRLPOOL 4df63c633dadb2d1d8e7dcac367422f0080164b7d7c431a9cfd8b53e385decddb865031cb95f879a19bdedd4bdd719ad7942ca3d722a63d2b1cfae164b007ef0
-MISC ChangeLog 73274 SHA256 7e4afef9dec743a328e4969e4b2bc38f7937a376a57de7e1958e8785218fac5a SHA512 dfc121cbce5e0f1bb836bbd6a59f08dc8f169b84f68b61565123a4d7f98e8db4927a5d2f85690ef414b8b47ec99f4ea6a64455dbd9cad71c838819c93460ddc9 WHIRLPOOL 3827a5c96f6c718aeb107aa276fa2451092b8bc783e6e2b479f04d5999d5b6ef4cb8f1fe7805be8ef3d3d8ad67255ee09403dc0d1742de1731f7c54fb15e3efa
+MISC ChangeLog 73383 SHA256 6afeb1cae38d6377e4054a86c99583067848b93c1d7563e653d4ca92f735125f SHA512 b78462d62d5e85d23cf480eb078e5657734c7c0f26b8b4b37327264d09722d2d7c85dd203c4f095c44eb80b5eaaff428414e152422d3d921ebcec0ad485850a9 WHIRLPOOL 521a730a9b89eb2a8f380db823556eeb55087bceba32e3c35f905b72a81a366a3c2b67956dd48245a29480eed44c13dde809d0472cff6c7d4377d34be3866c12
 MISC metadata.xml 1078 SHA256 cad311926efedde5a689ae18496389ca80a1e4c5b4b16f1bfb456e8e27ce118c SHA512 f208e189f4901e1385d4c237cb7c91f333021b7bc4656d8b8365d7f6d827dc3a3e7ef58963baec88f399ffea505577e94e7901c5e58119e5952736f1c129e4bb WHIRLPOOL d94e39a391cf3ce8c31647d55a387c6102e244fcc3ebdb34909024f8b2faecf7a225552c77dbc5d841ac45f2583ec38b7f8e18e9eee92fbc702210dbdb581740
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2
 
-iQIcBAEBCAAGBQJUgCGRAAoJEHfx8XVYajsfgEwQAJ0gI1OFuw6LGh80knM+p60t
-21et61OfsuEhOemGqQIfZ4sEQVKrjhpowuBdxERxh0Ssj0iGbu5GG3IVnS508rXf
-nA6ooOZf4ghrIL4LJ78KiQcwNV4kQw6kI0eddAkTxMthOJ6V+AuM8i0Pv3bm4z8T
-cj26356em4SYULaEqt+9wyr8AvHBXy7El0+j4wgY/XblwLHMxxxzQCZ4JRX9Ef8H
-7Kp3DPWfgw1BCyHS7e0rMqjEmbVVclXGK2Xk65HQn07/NhgyVbJpLP1u5z0UWrOJ
-11gEh7ua3P+ZjkwEqXewehbyZecTbFDIg5xR4ykFDy1HpHItmuw+nClnnXJSo0Yz
-fzkAXuHFP2W/z+1kgZ3q5Y57HV5gdp/lFRwX3Ic85POLRg7Lar2o92OKZOjSn5wP
-2Kt0VAq8MvKF1RdDuv0/TdC35nny1F7inx2kz2MzeCB+txn3UR7+oKCm7D4QBWkH
-OiAi580sUPc0C5VU49kv0UYKzWTTZJ2DgslNml134g6MQSkLckHbHH59I/diYslz
-qZmAiWQIJIlVwwsJjVUyHm+/NZ0O1xEvn+8hrfb7z4vV65B3NX4XiOHRdSOJNTJ4
-qsg+oS1W7BSneHxVA+3/5DDnheGLuiWQnH72ZmhULzRK0X8PU2p+CRW2bbpJNYt1
-1A8hDAPhQVPXqMVraBTO
-=mJik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+=mOAp
 -----END PGP SIGNATURE-----
diff --git a/net-mail/dovecot/files/dovecot-10-ssl.patch b/net-mail/dovecot/files/dovecot-10-ssl.patch
index 2e72e5945cb7..8173bacc0bc5 100644
--- a/net-mail/dovecot/files/dovecot-10-ssl.patch
+++ b/net-mail/dovecot/files/dovecot-10-ssl.patch
@@ -1,19 +1,15 @@
-# bug 508552
---- doc/example-config/conf.d/10-ssl.conf	2013-11-24 13:37:39.000000000 +0000
-+++ doc/example-config/conf.d/10-ssl.conf	2014-05-12 14:42:26.000000000 +0000
-@@ -51,6 +51,15 @@
+--- doc/example-config/conf.d/10-ssl.conf	2014-12-08 07:58:21.000000000 +0000
++++ doc/example-config/conf.d/10-ssl.conf	2014-12-08 08:02:19.000000000 +0000
+@@ -49,6 +49,12 @@
+ #ssl_protocols = !SSLv2
+ 
  # SSL ciphers to use
++# ###############
++# Added by Gentoo
++# You are encouraged to change the cipher list to
++#ssl_cipher_list = DEFAULT:!EXPORT:!LOW:!MEDIUM:!MD5
++# if you are not required to support legacy mail clients.
++# ###############
  #ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
  
-+# ##########################################
-+# You are strongly encouraged to change the above two settings to
-+#
-+#ssl_protocols = !SSLv2 !SSLv3
-+#ssl_cipher_list = ALL:!EXPORT:!LOW:!MEDIUM:!aNULL:+RC4:@STRENGTH
-+#
-+# if you are not required to support legacy mail clients.
-+# ##########################################
-+
  # Prefer the server's order of ciphers over client's.
- #ssl_prefer_server_ciphers = no
-