<div><br><div class="gmail_quote"><div dir="auto">On Wed, Jul 5, 2017 at 1:06 AM <<a href="mailto:kai.kang@windriver.com">kai.kang@windriver.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">From: Kai Kang <<a href="mailto:kai.kang@windriver.com" target="_blank">kai.kang@windriver.com</a>><br>
<br>
Introduce a distro feature openssl-no-weak-ciphers to make openssl disable weak<br>
ciphers support, including:<br>
<br>
* des<br>
* ec<br>
* ecdh<br>
* ecdsa<br>
* md2<br>
* mdc2</blockquote><div dir="auto"><br></div><div dir="auto">It's probably more appropriate to pin it at recipe level may be via package config OpenSSL is not universal and some may even avoid it completely</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
The following changes since commit 4b1d270602a0542eef1b497eaf15bad2b747686f:<br>
<br>
bitbake: bitbake-user-manual: Removed and replaced broken link (2017-07-04 16:05:22 +0100)<br>
<br>
are available in the git repository at:<br>
<br>
git://<a href="http://git.pokylinux.org/poky-contrib" rel="noreferrer" target="_blank">git.pokylinux.org/poky-contrib</a> kangkai/ciphers-weak<br>
<a href="http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/ciphers-weak" rel="noreferrer" target="_blank">http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/ciphers-weak</a><br>
<br>
Kai Kang (2):<br>
openssl: disable weak ciphers<br>
bind: disable ecdsa if openssl doesn't support it<br>
<br>
meta/recipes-connectivity/bind/<a href="http://bind_9.10.3-P3.bb" rel="noreferrer" target="_blank">bind_9.10.3-P3.bb</a> | 1 +<br>
meta/recipes-connectivity/openssl/openssl.inc | 5 +++++<br>
2 files changed, 6 insertions(+)<br>
<br>
--<br>
2.10.1<br>
<br>
--<br>
_______________________________________________<br>
Openembedded-core mailing list<br>
<a href="mailto:Openembedded-core@lists.openembedded.org" target="_blank">Openembedded-core@lists.openembedded.org</a><br>
<a href="http://lists.openembedded.org/mailman/listinfo/openembedded-core" rel="noreferrer" target="_blank">http://lists.openembedded.org/mailman/listinfo/openembedded-core</a><br>
</blockquote></div></div>