[OE-core] [PATCH 2/2] bind: disable ecdsa if openssl doesn't support it
kai.kang at windriver.com
kai.kang at windriver.com
Wed Jul 5 07:58:15 UTC 2017
From: Kai Kang <kai.kang at windriver.com>
Distro feature 'openssl-no-weak-ciphers' is introduced to disable
openssl weak ciphers support which include ecdsa. So configure bind
without ecdsa if openssl doesn't support it.
Signed-off-by: Kai Kang <kai.kang at windriver.com>
---
meta/recipes-connectivity/bind/bind_9.10.3-P3.bb | 1 +
1 file changed, 1 insertion(+)
diff --git a/meta/recipes-connectivity/bind/bind_9.10.3-P3.bb b/meta/recipes-connectivity/bind/bind_9.10.3-P3.bb
index 7eb79b0..e10cffc 100644
--- a/meta/recipes-connectivity/bind/bind_9.10.3-P3.bb
+++ b/meta/recipes-connectivity/bind/bind_9.10.3-P3.bb
@@ -41,6 +41,7 @@ ENABLE_IPV6 = "--enable-ipv6=${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'ye
EXTRA_OECONF = " ${ENABLE_IPV6} --with-libtool --enable-threads \
--disable-devpoll --enable-epoll --with-gost=no \
--with-gssapi=no --with-ecdsa=yes \
+ --with-ecdsa=${@bb.utils.contains('DISTRO_FEATURES', 'openssl-no-weak-ciphers', 'no', 'yes', d)} \
--sysconfdir=${sysconfdir}/bind \
--with-openssl=${STAGING_LIBDIR}/.. \
"
--
2.10.1
More information about the Openembedded-core
mailing list