]> code.ossystems Code Review - openembedded-core.git/commit
dropbear: new feature: disable-weak-ciphers
authorJoseph Reynolds <jrey@linux.ibm.com>
Thu, 20 Jun 2019 21:29:15 +0000 (16:29 -0500)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 21 Jun 2019 14:30:53 +0000 (15:30 +0100)
commitb11521ce1b1d1f8b4dddf830b41f5ea809730d22
tree9b6356256b5f0db3107e73febfca9b471947dc0d
parent04454faadf5cf18c054c98803380393db42646c4
dropbear: new feature: disable-weak-ciphers

Enhances dropbear with a new feature "disable-weak-ciphers", on by default.
This feature disables all CBC, SHA1, and diffie-hellman group1 ciphers in
the dropbear ssh server and client.

Disable this feature if you need to connect to the ssh server from older
clients.  Additional customization can be done with local_options.h as usual.

Tested: On dropbear_2019.78.

Upstream-Status: Inappropriate [configuration]

Signed-off-by: Joseph Reynolds <joseph.reynolds1@ibm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-core/dropbear/dropbear.inc
meta/recipes-core/dropbear/dropbear/dropbear-disable-weak-ciphers.patch [new file with mode: 0644]