From 26ece150c83d3ebaf57b27b845011839e87d41b2 Mon Sep 17 00:00:00 2001 From: Patrick Williams Date: Tue, 22 Sep 2015 21:59:41 -0500 Subject: openssl: reduce crypto algorithms used Resolves openbmc/meta-phosphor#9. Signed-off-by: Patrick Williams --- .../common/recipes-connectivity/openssl/openssl_%.bbappend | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend diff --git a/meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend b/meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend new file mode 100644 index 000000000..a18a55228 --- /dev/null +++ b/meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend @@ -0,0 +1,11 @@ + +# General config settings. +EXTRA_OECONF_append = " shared no-hw no-err no-psk no-srp no-engines " + +# Disable SSL (keep TLS only). +EXTRA_OECONF_append = " no-ssl2 no-ssl3 " + +# Disable various algorithms. +EXTRA_OECONF_append = " no-idea no-md2 no-mdc2 no-rc5 no-md4 \ + no-ripemd160 no-rmd160 no-whirlpool no-sha0 no-camellia \ + no-rc2 no-rc4 no-bf no-cast no-seed no-gost " -- cgit v1.2.1