diff options
author | Stefan Sørensen <stefan.sorensen@spectralink.com> | 2018-07-03 09:48:10 +0200 |
---|---|---|
committer | Thomas Petazzoni <thomas.petazzoni@bootlin.com> | 2018-07-04 21:43:55 +0200 |
commit | 72d4d098b0dbb10d3904868acc11c97acafa8d80 (patch) | |
tree | 1aecdd0380ca98de4fc197102d204f4a85a09a8d /package/json-for-modern-cpp | |
parent | bf19116c802118ec567e668e60de088b646f4fa3 (diff) | |
download | buildroot-72d4d098b0dbb10d3904868acc11c97acafa8d80.tar.gz buildroot-72d4d098b0dbb10d3904868acc11c97acafa8d80.zip |
dropbear: Disable legacy/insecure options
Dropbear by default enables a number of algorithms that are now considered
insecure and should only be used when legacy support is required:
3DES encryption
Blowfish encryption
SHA1-96 message integrity
CBC encryption mode
DSA public keys
Diffie-Hellman Group1 key exchange
So disable them by default, but add a config option for bringing them back.
Furthermore the Blowfish legacy algorithm is unconditionally disabled
Signed-off-by: Stefan Sørensen <stefan.sorensen@spectralink.com>
Reviewed-by: Baruch Siach <baruch@tkos.co.il>
Reviewed-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Diffstat (limited to 'package/json-for-modern-cpp')
0 files changed, 0 insertions, 0 deletions