1 files changed, 23 insertions, 0 deletions

diff --git a/www/chromium-uc/patches/extra/ungoogled-chromium/add-flag-to-disable-tls-grease.patch b/www/chromium-uc/patches/extra/ungoogled-chromium/add-flag-to-disable-tls-grease.patch
new file mode 100644
index 0000000..0c208d0
--- /dev/null
+++ b/www/chromium-uc/patches/extra/ungoogled-chromium/add-flag-to-disable-tls-grease.patch
@@ -0,0 +1,23 @@
+--- a/chrome/browser/ungoogled_flag_entries.h
++++ b/chrome/browser/ungoogled_flag_entries.h
+@@ -92,4 +92,8 @@
+      "Referrer directive",
+      "Allows setting a custom directive for referrer headers.  The no cross-origin referrer option removes all cross-origin referrers, the minimal option removes all cross-origin referrers and strips same-origin referrers down to the origin, and the no referrers option removes all referrers.  ungoogled-chromium flag.",
+      kOsAll, MULTI_VALUE_TYPE(kReferrerDirective)},
++    {"disable-grease-tls",
++     "Disable GREASE for TLS",
++     "Turn off GREASE (Generate Random Extensions And Sustain Extensibility) for TLS connections.  ungoogled-chromium flag.",
++     kOsAll, SINGLE_VALUE_TYPE("disable-grease-tls")},
+ #endif  // CHROME_BROWSER_UNGOOGLED_FLAG_ENTRIES_H_
+--- a/net/socket/ssl_client_socket_impl.cc
++++ b/net/socket/ssl_client_socket_impl.cc
+@@ -311,7 +311,8 @@ class SSLClientSocketImpl::SSLContext {
+     SSL_CTX_sess_set_new_cb(ssl_ctx_.get(), NewSessionCallback);
+     SSL_CTX_set_timeout(ssl_ctx_.get(), 1 * 60 * 60 /* one hour */);
+ 
+-    SSL_CTX_set_grease_enabled(ssl_ctx_.get(), 1);
++    int grease_mode = !base::CommandLine::ForCurrentProcess()->HasSwitch("disable-grease-tls");
++    SSL_CTX_set_grease_enabled(ssl_ctx_.get(), grease_mode);
+ 
+     // Deduplicate all certificates minted from the SSL_CTX in memory.
+     SSL_CTX_set0_buffer_pool(ssl_ctx_.get(), x509_util::GetBufferPool());