diff options
| author | Gary Lin <glin@suse.com> | 2017-04-10 17:23:29 +0800 |
|---|---|---|
| committer | Peter Jones <pjones@redhat.com> | 2017-04-11 10:42:19 -0400 |
| commit | e9cc33d6f2b7f35c6f5e349fd83fb9ae0bc66226 (patch) | |
| tree | a0b5f5e2b4444bb15f5a4c145a4107c9158dda83 /Cryptlib/opensslconf-diff.patch | |
| parent | 80d49f758ead0180bfe6161931838e0578248303 (diff) | |
| download | efi-boot-shim-e9cc33d6f2b7f35c6f5e349fd83fb9ae0bc66226.tar.gz efi-boot-shim-e9cc33d6f2b7f35c6f5e349fd83fb9ae0bc66226.zip | |
Cryptlib: remove DES
Disable DES completely since it's already old and insecure.
This makes MokManager not support the DES based password hash but
probably no one is using it.
Signed-off-by: Gary Lin <glin@suse.com>
Diffstat (limited to 'Cryptlib/opensslconf-diff.patch')
| -rw-r--r-- | Cryptlib/opensslconf-diff.patch | 14 |
1 files changed, 12 insertions, 2 deletions
diff --git a/Cryptlib/opensslconf-diff.patch b/Cryptlib/opensslconf-diff.patch index 76caa2c1..efd2ea48 100644 --- a/Cryptlib/opensslconf-diff.patch +++ b/Cryptlib/opensslconf-diff.patch @@ -1,8 +1,18 @@ diff --git a/Cryptlib/Include/openssl/opensslconf.h b/Cryptlib/Include/openssl/opensslconf.h -index 1917d7a..68a2603 100644 +index 1917d7a..c73d03a 100644 --- a/Cryptlib/Include/openssl/opensslconf.h +++ b/Cryptlib/Include/openssl/opensslconf.h -@@ -59,6 +59,9 @@ extern "C" { +@@ -47,6 +47,9 @@ extern "C" { + #ifndef OPENSSL_NO_CT + # define OPENSSL_NO_CT + #endif ++#ifndef OPENSSL_NO_DES ++# define OPENSSL_NO_DES ++#endif + #ifndef OPENSSL_NO_DSA + # define OPENSSL_NO_DSA + #endif +@@ -59,6 +62,9 @@ extern "C" { #ifndef OPENSSL_NO_MD2 # define OPENSSL_NO_MD2 #endif |