[OE-core] [warrior][PATCH] dropbear: new feature: disable-weak-ciphers
Adrian Bunk
bunk at stusta.de
Mon Jul 15 20:58:42 UTC 2019
On Mon, Jul 15, 2019 at 03:38:57PM -0500, Joseph Reynolds wrote:
> Enhances dropbear with a new feature "disable-weak-ciphers", on by default.
> This feature disables all CBC, SHA1, and diffie-hellman group1 ciphers in
> the dropbear ssh server and client.
>
> Disable this feature if you need to connect to the ssh server from older
> clients. Additional customization can be done with local_options.h as usual.
>...
Changing the default behaviour in a stable series does not sound
appropriate to me.
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
More information about the Openembedded-core
mailing list