TLS 1 and TLS 1.1 have been deprecated by the IETF since 2021. Disables support by default in packageconfig, requiring users to explicitly opt-in for these deprecated protocols.
Signed-off-by: Colin Pinnell McAllister <[email protected]> --- meta/recipes-connectivity/openssl/openssl_3.5.5.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-connectivity/openssl/openssl_3.5.5.bb b/meta/recipes-connectivity/openssl/openssl_3.5.5.bb index c0d02b617b..6b9ccef0b5 100644 --- a/meta/recipes-connectivity/openssl/openssl_3.5.5.bb +++ b/meta/recipes-connectivity/openssl/openssl_3.5.5.bb @@ -29,8 +29,8 @@ PACKAGECONFIG:class-native = "" PACKAGECONFIG:class-nativesdk = "" PACKAGECONFIG[cryptodev-linux] = "enable-devcryptoeng,disable-devcryptoeng,cryptodev-linux,,cryptodev-module" -PACKAGECONFIG[no-tls1] = "no-tls1" -PACKAGECONFIG[no-tls1_1] = "no-tls1_1" +PACKAGECONFIG[tls1] = ",no-tls1" +PACKAGECONFIG[tls1_1] = ",no-tls1_1" PACKAGECONFIG[manpages] = "" PACKAGECONFIG[fips] = "enable-fips" -- 2.53.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#230998): https://lists.openembedded.org/g/openembedded-core/message/230998 Mute This Topic: https://lists.openembedded.org/mt/117761904/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
