<html><body>This changes the Dropbear SSH server configuration so it will not<br><div>accept medium-strength encryption ciphers including: CBC mode, MD5,<br>96-bit MAC, and triple DES.<br><br>Upstream-Status: Pending<br><br>Signed-off-by: Joseph Reynolds &lt;joseph-reynolds@charter.net&gt;<br>---<br>&nbsp;meta/recipes-core/dropbear/dropbear/localoptions.h | 8 ++++++++<br>&nbsp;1 file changed, 8 insertions(+)<br>&nbsp;create mode 100644 meta/recipes-core/dropbear/dropbear/localoptions.h<br><br>diff --git a/meta/recipes-core/dropbear/dropbear/localoptions.h b/meta/recipes-core/dropbear/dropbear/localoptions.h<br>new file mode 100644<br>index 0000000..ec48c26<br>--- /dev/null<br>+++ b/meta/recipes-core/dropbear/dropbear/localoptions.h<br>@@ -0,0 +1,8 @@<br>+/* Customize dropbear per default_options.h in the dropbear project */<br>+<br>+/* Disable insecure ciphers */<br>+#define DROPBEAR_TWOFISH256 0<br>+#define DROPBEAR_TWOFISH128 0<br>+#define DROPBEAR_ENABLE_CBC_MODE 0<br>+#define DROPBEAR_SHA1_HMAC 0<br>+#define DROPBEAR_SHA1_96_HMAC 0<br>-- <br>2.7.2<br><br><br></div></body></html>