[OE-core] [PATCH 0/2] Introduce a distro feature openssl-no-weak-ciphers

[Khem Raj]

On Wed, Jul 5, 2017 at 1:06 AM <kai.kang at windriver.com> wrote:

> From: Kai Kang <kai.kang at windriver.com>
>
> Introduce a distro feature openssl-no-weak-ciphers to make openssl disable
> weak
> ciphers support, including:
>
> * des
> * ec
> * ecdh
> * ecdsa
> * md2
> * mdc2


It's probably more appropriate to pin it at recipe level may be via package
config OpenSSL is not universal and some may even avoid it completely

>
>
> The following changes since commit
> 4b1d270602a0542eef1b497eaf15bad2b747686f:
>
>   bitbake: bitbake-user-manual: Removed and replaced broken link
> (2017-07-04 16:05:22 +0100)
>
> are available in the git repository at:
>
>   git://git.pokylinux.org/poky-contrib kangkai/ciphers-weak
>
> http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/ciphers-weak
>
> Kai Kang (2):
>   openssl: disable weak ciphers
>   bind: disable ecdsa if openssl doesn't support it
>
>  meta/recipes-connectivity/bind/bind_9.10.3-P3.bb | 1 +
>  meta/recipes-connectivity/openssl/openssl.inc    | 5 +++++
>  2 files changed, 6 insertions(+)
>
> --
> 2.10.1
>
> --
> _______________________________________________
> Openembedded-core mailing list
> Openembedded-core at lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-core
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openembedded.org/pipermail/openembedded-core/attachments/20170705/44dcd6ee/attachment-0002.html>