summaryrefslogtreecommitdiffstats
path: root/meta-phosphor/common/recipes-connectivity
diff options
context:
space:
mode:
authorPatrick Williams <patrick@stwcx.xyz>2015-09-22 21:59:41 -0500
committerPatrick Williams <patrick@stwcx.xyz>2015-09-22 22:00:45 -0500
commit26ece150c83d3ebaf57b27b845011839e87d41b2 (patch)
tree67fe9148abd37db116b2082cd2dc79c5c20d8ae3 /meta-phosphor/common/recipes-connectivity
parent3445365503e1e4d5601acf7c05609cc9673ec414 (diff)
downloadtalos-openbmc-26ece150c83d3ebaf57b27b845011839e87d41b2.tar.gz
talos-openbmc-26ece150c83d3ebaf57b27b845011839e87d41b2.zip
openssl: reduce crypto algorithms used
Resolves openbmc/meta-phosphor#9. Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Diffstat (limited to 'meta-phosphor/common/recipes-connectivity')
-rw-r--r--meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend11
1 files changed, 11 insertions, 0 deletions
diff --git a/meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend b/meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend
new file mode 100644
index 000000000..a18a55228
--- /dev/null
+++ b/meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend
@@ -0,0 +1,11 @@
+
+# General config settings.
+EXTRA_OECONF_append = " shared no-hw no-err no-psk no-srp no-engines "
+
+# Disable SSL (keep TLS only).
+EXTRA_OECONF_append = " no-ssl2 no-ssl3 "
+
+# Disable various algorithms.
+EXTRA_OECONF_append = " no-idea no-md2 no-mdc2 no-rc5 no-md4 \
+ no-ripemd160 no-rmd160 no-whirlpool no-sha0 no-camellia \
+ no-rc2 no-rc4 no-bf no-cast no-seed no-gost "
OpenPOWER on IntegriCloud