Andrew Gunnerson c260174c5b
T5151: hostap: Reintroduce Debian's allow-legacy-renegotiation.patch
The Debian 12 upgrade in T5003 caused a regression for connecting to
legacy networks that only support TLSv1.0/1.1 for EAP-TLS. This commit
fixes one part of the issue by adding Debian's patch for allowing legacy
renegotiation (SSL_OP_LEGACY_SERVER_CONNECT flag). The flag used to be
allowed by default, but that changed with the openssl 3.0 upgrade in
Debian 12.

(This commit also updates `build.sh` to just overwrite
`debian/patches/series` and not delete patch files since
dpkg-buildpackage/quilt never applies unlisted patches.)

Signed-off-by: Andrew Gunnerson <accounts+github@chiller3.com>
2023-04-09 12:51:23 -04:00
..