mirror of
https://git.yoctoproject.org/poky
synced 2026-05-08 17:19:20 +00:00
openssh: update from 7.7p1 to 7.8p1
Drop the disable-ciphers patch since it has been integrated: cec33896 Omit 3des-cbc if OpenSSL built without DES. (From OE-Core rev: 7d35f5bb7b1700ae4bb7f55af8db7357a851c15a) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
5c0f6391cf
commit
f19360329a
-39
@@ -1,39 +0,0 @@
|
||||
From 265eaab8b39d8d8721224a48eefed5bf1696d353 Mon Sep 17 00:00:00 2001
|
||||
From: Hongxu Jia <hongxu.jia@windriver.com>
|
||||
Date: Wed, 18 Apr 2018 21:58:32 +0800
|
||||
Subject: [PATCH] disable ciphers not supported by OpenSSL DES
|
||||
|
||||
While compiling openssl with option `no-des', it caused the openssh
|
||||
build failure
|
||||
...
|
||||
cipher.c:85:41: error: 'EVP_des_ede3_cbc' undeclared here (not in a function);
|
||||
...
|
||||
|
||||
OpenSSL configured that way defines OPENSSL_NO_DES to disable des
|
||||
|
||||
Suggested by dtucker@
|
||||
|
||||
Upstream-Status: Submitted [openssh-unix-dev@mindrot.org]
|
||||
|
||||
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
|
||||
---
|
||||
cipher.c | 2 ++
|
||||
1 file changed, 2 insertions(+)
|
||||
|
||||
diff --git a/cipher.c b/cipher.c
|
||||
index c3cd5dc..86558e1 100644
|
||||
--- a/cipher.c
|
||||
+++ b/cipher.c
|
||||
@@ -82,7 +82,9 @@ struct sshcipher {
|
||||
|
||||
static const struct sshcipher ciphers[] = {
|
||||
#ifdef WITH_OPENSSL
|
||||
+#ifndef OPENSSL_NO_DES
|
||||
{ "3des-cbc", 8, 24, 0, 0, CFLAG_CBC, EVP_des_ede3_cbc },
|
||||
+#endif
|
||||
{ "aes128-cbc", 16, 16, 0, 0, CFLAG_CBC, EVP_aes_128_cbc },
|
||||
{ "aes192-cbc", 16, 24, 0, 0, CFLAG_CBC, EVP_aes_192_cbc },
|
||||
{ "aes256-cbc", 16, 32, 0, 0, CFLAG_CBC, EVP_aes_256_cbc },
|
||||
--
|
||||
2.7.4
|
||||
|
||||
+2
-3
@@ -25,13 +25,12 @@ SRC_URI = "http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-${PV}.tar
|
||||
file://fix-potential-signed-overflow-in-pointer-arithmatic.patch \
|
||||
file://sshd_check_keys \
|
||||
file://add-test-support-for-busybox.patch \
|
||||
file://disable-ciphers-not-supported-by-OpenSSL-DES.patch \
|
||||
"
|
||||
|
||||
PAM_SRC_URI = "file://sshd"
|
||||
|
||||
SRC_URI[md5sum] = "68ba883aff6958297432e5877e9a0fe2"
|
||||
SRC_URI[sha256sum] = "d73be7e684e99efcd024be15a30bffcbe41b012b2f7b3c9084aed621775e6b8f"
|
||||
SRC_URI[md5sum] = "ce1d090fa6239fd38eb989d5e983b074"
|
||||
SRC_URI[sha256sum] = "1a484bb15152c183bb2514e112aa30dd34138c3cfb032eee5490a66c507144ca"
|
||||
|
||||
inherit useradd update-rc.d update-alternatives systemd
|
||||
|
||||
Reference in New Issue
Block a user