[OE-core] [warrior][PATCH] dropbear: new feature: disable-weak-ciphers

Adrian Bunk bunk at stusta.de
Mon Jul 15 20:58:42 UTC 2019


On Mon, Jul 15, 2019 at 03:38:57PM -0500, Joseph Reynolds wrote:
> Enhances dropbear with a new feature "disable-weak-ciphers", on by default.
> This feature disables all CBC, SHA1, and diffie-hellman group1 ciphers in
> the dropbear ssh server and client.
> 
> Disable this feature if you need to connect to the ssh server from older
> clients.  Additional customization can be done with local_options.h as usual.
>...

Changing the default behaviour in a stable series does not sound 
appropriate to me.

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed



More information about the Openembedded-core mailing list