[LEDE-DEV] [PATCH] openssl: Remove RIPEMD-160 from OpenSSL

txt.file txt.file at txtfile.eu
Mon Mar 27 15:45:00 PDT 2017


The topic and patch is about OpenSSL but description is about OpenSSH.
What has OpenSSL to do with OpenSSH?

kind regards
txt.file
--
This message is signed.

Rosen Penev:
> The commit that removed no-ripemd stated that it was needed for openssh.
> However with recent OpenSSH releases (7.4), RIPEMD-160 is run-time disabled.
> I've verified this with ssh -vvv making no mention of RIPEMD-160 anywhere.
> ---
>  package/libs/openssl/Makefile | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile
> index 2543a46..a2d3ce3 100644
> --- a/package/libs/openssl/Makefile
> +++ b/package/libs/openssl/Makefile
> @@ -100,7 +100,7 @@ endef
>  
>  
>  OPENSSL_NO_CIPHERS:= no-idea no-md2 no-mdc2 no-rc5 no-sha0 no-camellia no-krb5 \
> - no-whrlpool no-whirlpool no-seed no-jpake
> + no-whrlpool no-whirlpool no-seed no-jpake no-ripemd
>  OPENSSL_OPTIONS:= shared no-err no-sse2 no-ssl2 no-ssl2-method no-heartbeats
>  
>  ifdef CONFIG_OPENSSL_ENGINE_CRYPTO
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.infradead.org/pipermail/lede-dev/attachments/20170327/8c54e488/attachment.sig>


More information about the Lede-dev mailing list