diff options
Diffstat (limited to 'meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch')
-rw-r--r-- | meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch | 26 |
1 files changed, 11 insertions, 15 deletions
diff --git a/meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch b/meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch index b54581f17a..f998caa255 100644 --- a/meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch +++ b/meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch | |||
@@ -9,27 +9,23 @@ and we want to support the stong algorithms. | |||
9 | 9 | ||
10 | Upstream-Status: Inappropriate [configuration] | 10 | Upstream-Status: Inappropriate [configuration] |
11 | Signed-off-by: Joseph Reynolds <joseph.reynolds1@ibm.com> | 11 | Signed-off-by: Joseph Reynolds <joseph.reynolds1@ibm.com> |
12 | |||
13 | --- | 12 | --- |
14 | default_options.h | 4 ++-- | 13 | src/default_options.h | 2 +- |
15 | 1 file changed, 2 insertions(+), 2 deletions(-) | 14 | 1 file changed, 1 insertion(+), 1 deletion(-) |
16 | 15 | ||
17 | diff --git a/default_options.h b/default_options.h | 16 | diff --git a/src/default_options.h b/src/default_options.h |
18 | index 1aa2297..7ff1394 100644 | 17 | index d417588..bc5200f 100644 |
19 | --- a/default_options.h | 18 | --- a/src/default_options.h |
20 | +++ b/default_options.h | 19 | +++ b/src/default_options.h |
21 | @@ -163,12 +163,12 @@ IMPORTANT: Some options will require "make clean" after changes */ | 20 | @@ -180,7 +180,7 @@ IMPORTANT: Some options will require "make clean" after changes */ |
22 | * Small systems should generally include either curve25519 or ecdh for performance. | 21 | * Small systems should generally include either curve25519 or ecdh for performance. |
23 | * curve25519 is less widely supported but is faster | 22 | * curve25519 is less widely supported but is faster |
24 | */ | 23 | */ |
25 | -#define DROPBEAR_DH_GROUP14_SHA1 1 | 24 | -#define DROPBEAR_DH_GROUP14_SHA1 1 |
26 | +#define DROPBEAR_DH_GROUP14_SHA1 0 | 25 | +#define DROPBEAR_DH_GROUP14_SHA1 0 |
27 | #define DROPBEAR_DH_GROUP14_SHA256 1 | 26 | #define DROPBEAR_DH_GROUP14_SHA256 1 |
28 | #define DROPBEAR_DH_GROUP16 0 | 27 | #define DROPBEAR_DH_GROUP16 0 |
29 | #define DROPBEAR_CURVE25519 1 | 28 | #define DROPBEAR_CURVE25519 1 |
30 | #define DROPBEAR_ECDH 1 | 29 | -- |
31 | -#define DROPBEAR_DH_GROUP1 1 | 30 | 2.25.1 |
32 | +#define DROPBEAR_DH_GROUP1 0 | 31 | |
33 | |||
34 | /* When group1 is enabled it will only be allowed by Dropbear client | ||
35 | not as a server, due to concerns over its strength. Set to 0 to allow | ||