[OE-core] [PATCH] openssl: disable SSLv3 by default
Brendan Le Foll
brendan.le.foll at intel.com
Mon Feb 16 14:38:43 UTC 2015
On Mon, Feb 16, 2015 at 03:35:32PM +0100, Sven Ebenfeld wrote:
> Am 16.02.2015 um 14:51 schrieb Brendan Le Foll:
> >
> > No real reason, was trying to keep it as simple as possible whilst
> > making it clear it was not a good idea to re-enable it. I can make it
> > a PACKAGECOUNFIG[ssl3] = "--no-ssl3" if you think that's best.
>
> Shouldn't it be PACKAGECOUNFIG[nossl3] ?
> This makes it more clear that one is actually disabling SSLv3 instead of
> trying to enable it.
The idea is to disable ssl3 by default and making enabling optional.
I'm thinking this, which means people have to enable SSLv3 to get it.
PACKAGECONFIG[ssl3] = "--enable-ssl3, --no-ssl3"
Cheers,
Brendan
More information about the Openembedded-core
mailing list