[OE-core] [PATCH 0/2] Introduce a distro feature openssl-no-weak-ciphers

Kang Kai Kai.Kang at windriver.com
Thu Jul 6 02:00:30 UTC 2017


On 2017年07月05日 23:15, Burton, Ross wrote:
>
> On 5 July 2017 at 15:38, Khem Raj <raj.khem at gmail.com 
> <mailto:raj.khem at gmail.com>> wrote:
>
>     It's probably more appropriate to pin it at recipe level may be
>     via package config OpenSSL is not universal and some may even
>     avoid it completely
>
>
> Agreed, whilst I'm not against adding options for enabling insecure 
> ciphers (verses just disabling them), I don't think they deserve a 
> DISTRO_FEATURE of their own.

The problem is that packages depend on openssl don't know whether the 
cipher they need is disabled or not, so add such a DISTRO_FEATURE to 
sync openssl and packages depends on it.
I did it by a var before, but it looks not be a so official way.


Thanks,
Kai


>
> Ross


-- 
Regards,
Neil | Kai Kang

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openembedded.org/pipermail/openembedded-core/attachments/20170706/d9369f6a/attachment-0002.html>


More information about the Openembedded-core mailing list