From: Kai Kang <[email protected]>

Distro feature 'openssl-no-weak-ciphers' is introduced to disable
openssl weak ciphers support which include des. Check the distro feature
to disable hostapd configs which depend on des.

Signed-off-by: Kai Kang <[email protected]>
---
 meta-oe/recipes-connectivity/hostapd/hostapd_2.6.bb | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/meta-oe/recipes-connectivity/hostapd/hostapd_2.6.bb 
b/meta-oe/recipes-connectivity/hostapd/hostapd_2.6.bb
index 3b74f48..4a7275d 100644
--- a/meta-oe/recipes-connectivity/hostapd/hostapd_2.6.bb
+++ b/meta-oe/recipes-connectivity/hostapd/hostapd_2.6.bb
@@ -26,6 +26,22 @@ do_configure() {
 }
 
 do_compile() {
+    COMMENT="# Disable configs depend on DES"
+    if ${@bb.utils.contains('DISTRO_FEATURES', 'openssl-no-weak-ciphers', 
'true', 'false', d)} \
+        && ! grep -q "$COMMENT" ${B}/.config; then
+        echo >> ${B}/.config
+        echo "$COMMENT" >> ${B}/.config
+        for config in CONFIG_EAP_MSCHAPV2 CONFIG_EAP_PEAP CONFIG_EAP_IKEV2 \
+                    CONFIG_EAP_TLS CONFIG_EAP_UNAUTH_TLS CONFIG_EAP_TTLS \
+                    CONFIG_EAP_FAST CONFIG_INTERNAL_LIBTOMMATH; do
+            sed -i -e "s/^$config=.*/#&/" ${B}/.config
+            echo "$config=n" >>${B}/.config
+        done
+
+        sed -i 's/^CONFIG_TLS=.*/#&/' ${B}/.config
+        echo 'CONFIG_TLS=internal' >>${B}/.config
+    fi
+
     export CFLAGS="-MMD -O2 -Wall -g -I${STAGING_INCDIR}/libnl3"
     make
 }
-- 
2.10.1

-- 
_______________________________________________
Openembedded-devel mailing list
[email protected]
http://lists.openembedded.org/mailman/listinfo/openembedded-devel

Reply via email to