mirror of
git://git.yoctoproject.org/poky
synced 2026-08-17 08:32:24 +00:00
a4df7ceead
refresh the following patches for new version: 0001-urandom-xauth-changes-to-options.h.patch 0005-dropbear-enable-pam.patch dropbear-disable-weak-ciphers.patch Changelog: https://github.com/mkj/dropbear/releases/tag/DROPBEAR_2022.82 (From OE-Core rev: d5f9c44ede9babd0f48306cfefe4a16065e8ea30) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
32 lines
1.1 KiB
Diff
32 lines
1.1 KiB
Diff
From c347ece05a7fdbf50d76cb136b9ed45caed333f6 Mon Sep 17 00:00:00 2001
|
|
From: Joseph Reynolds <joseph.reynolds1@ibm.com>
|
|
Date: Thu, 20 Jun 2019 16:29:15 -0500
|
|
Subject: [PATCH] dropbear: new feature: disable-weak-ciphers
|
|
|
|
This feature disables all CBC, SHA1, and diffie-hellman group1 ciphers
|
|
in the dropbear ssh server and client since they're considered weak ciphers
|
|
and we want to support the stong algorithms.
|
|
|
|
Upstream-Status: Inappropriate [configuration]
|
|
Signed-off-by: Joseph Reynolds <joseph.reynolds1@ibm.com>
|
|
---
|
|
default_options.h | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/default_options.h b/default_options.h
|
|
index d417588..bc5200f 100644
|
|
--- a/default_options.h
|
|
+++ b/default_options.h
|
|
@@ -180,7 +180,7 @@ IMPORTANT: Some options will require "make clean" after changes */
|
|
* Small systems should generally include either curve25519 or ecdh for performance.
|
|
* curve25519 is less widely supported but is faster
|
|
*/
|
|
-#define DROPBEAR_DH_GROUP14_SHA1 1
|
|
+#define DROPBEAR_DH_GROUP14_SHA1 0
|
|
#define DROPBEAR_DH_GROUP14_SHA256 1
|
|
#define DROPBEAR_DH_GROUP16 0
|
|
#define DROPBEAR_CURVE25519 1
|
|
--
|
|
2.25.1
|
|
|