[OE-core] [PATCH] openssl: disable SSLv3 by default

Brendan Le Foll brendan.le.foll at intel.com
Mon Feb 16 14:38:43 UTC 2015


On Mon, Feb 16, 2015 at 03:35:32PM +0100, Sven Ebenfeld wrote:
> Am 16.02.2015 um 14:51 schrieb Brendan Le Foll:
> > 
> > No real reason, was trying to keep it as simple as possible whilst
> > making it clear it was not a good idea to re-enable it. I can make it
> > a PACKAGECOUNFIG[ssl3] = "--no-ssl3" if you think that's best.
> 
> Shouldn't it be PACKAGECOUNFIG[nossl3] ?
> This makes it more clear that one is actually disabling SSLv3 instead of
> trying to enable it.

The idea is to disable ssl3 by default and making enabling optional.

I'm thinking this, which means people have to enable SSLv3 to get it.
PACKAGECONFIG[ssl3] = "--enable-ssl3, --no-ssl3"

Cheers,
Brendan



More information about the Openembedded-core mailing list