summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch
diff options
context:
space:
mode:
Diffstat (limited to 'meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch')
-rw-r--r--meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch26
1 files changed, 11 insertions, 15 deletions
diff --git a/meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch b/meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch
index b54581f17a..f998caa255 100644
--- a/meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch
+++ b/meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch
@@ -9,27 +9,23 @@ and we want to support the stong algorithms.
9 9
10Upstream-Status: Inappropriate [configuration] 10Upstream-Status: Inappropriate [configuration]
11Signed-off-by: Joseph Reynolds <joseph.reynolds1@ibm.com> 11Signed-off-by: Joseph Reynolds <joseph.reynolds1@ibm.com>
12
13--- 12---
14 default_options.h | 4 ++-- 13 src/default_options.h | 2 +-
15 1 file changed, 2 insertions(+), 2 deletions(-) 14 1 file changed, 1 insertion(+), 1 deletion(-)
16 15
17diff --git a/default_options.h b/default_options.h 16diff --git a/src/default_options.h b/src/default_options.h
18index 1aa2297..7ff1394 100644 17index d417588..bc5200f 100644
19--- a/default_options.h 18--- a/src/default_options.h
20+++ b/default_options.h 19+++ b/src/default_options.h
21@@ -163,12 +163,12 @@ IMPORTANT: Some options will require "make clean" after changes */ 20@@ -180,7 +180,7 @@ IMPORTANT: Some options will require "make clean" after changes */
22 * Small systems should generally include either curve25519 or ecdh for performance. 21 * Small systems should generally include either curve25519 or ecdh for performance.
23 * curve25519 is less widely supported but is faster 22 * curve25519 is less widely supported but is faster
24 */ 23 */
25-#define DROPBEAR_DH_GROUP14_SHA1 1 24-#define DROPBEAR_DH_GROUP14_SHA1 1
26+#define DROPBEAR_DH_GROUP14_SHA1 0 25+#define DROPBEAR_DH_GROUP14_SHA1 0
27 #define DROPBEAR_DH_GROUP14_SHA256 1 26 #define DROPBEAR_DH_GROUP14_SHA256 1
28 #define DROPBEAR_DH_GROUP16 0 27 #define DROPBEAR_DH_GROUP16 0
29 #define DROPBEAR_CURVE25519 1 28 #define DROPBEAR_CURVE25519 1
30 #define DROPBEAR_ECDH 1 29--
31-#define DROPBEAR_DH_GROUP1 1 302.25.1
32+#define DROPBEAR_DH_GROUP1 0 31
33
34 /* When group1 is enabled it will only be allowed by Dropbear client
35 not as a server, due to concerns over its strength. Set to 0 to allow