Re: [OE-core] [PATCH 2/3] libxcrypt: Limit to enabling strong hash algos only

2023-07-05 Thread Alexandre Belloni via lists.openembedded.org
On 05/07/2023 11:08:32+, Ross Burton wrote: > On 30 Jun 2023, at 14:30, Alexandre Belloni via lists.openembedded.org > wrote: > > > > Hello Khem, > > > > This causes python ptest failures: > > > > {'python3': ['test_crypt', 'test_methods', 'test_sha2_rounds']} > > > > We should probably

Re: [OE-core] [PATCH 2/3] libxcrypt: Limit to enabling strong hash algos only

2023-07-05 Thread Ross Burton
On 30 Jun 2023, at 14:30, Alexandre Belloni via lists.openembedded.org wrote: > > Hello Khem, > > This causes python ptest failures: > > {'python3': ['test_crypt', 'test_methods', 'test_sha2_rounds']} > > We should probably disable those Guessing this is also the cause of the perl failures:

Re: [OE-core] [PATCH 2/3] libxcrypt: Limit to enabling strong hash algos only

2023-07-04 Thread Khem Raj
On Tue, Jul 4, 2023 at 3:54 AM Ross Burton wrote: > > On 30 Jun 2023, at 14:30, Alexandre Belloni via lists.openembedded.org > wrote: > > > > Hello Khem, > > > > This causes python ptest failures: > > > > {'python3': ['test_crypt', 'test_methods', 'test_sha2_rounds']} > > > > We should probably

Re: [OE-core] [PATCH 2/3] libxcrypt: Limit to enabling strong hash algos only

2023-07-04 Thread Alexander Kanavin
I would also suggest that xcrypt itself is changed to default only to strong algorithms, and weak algorithms is an opt-in. This idea of 'letting users decide' which crypto they want from all-included set is frankly maddening, and I do not understand why it's still happening in 2023. Alex On

Re: [OE-core] [PATCH 2/3] libxcrypt: Limit to enabling strong hash algos only

2023-07-04 Thread Ross Burton
On 30 Jun 2023, at 14:30, Alexandre Belloni via lists.openembedded.org wrote: > > Hello Khem, > > This causes python ptest failures: > > {'python3': ['test_crypt', 'test_methods', 'test_sha2_rounds']} > > We should probably disable those I would say to send a patch upstream to make those

Re: [OE-core] [PATCH 2/3] libxcrypt: Limit to enabling strong hash algos only

2023-06-30 Thread Alexandre Belloni via lists.openembedded.org
Hello Khem, This causes python ptest failures: {'python3': ['test_crypt', 'test_methods', 'test_sha2_rounds']} We should probably disable those On 23/06/2023 22:32:21-0700, Khem Raj wrote: > This ensures that weak algorithms are not included, which should improve > the defauls to be more

[OE-core] [PATCH 2/3] libxcrypt: Limit to enabling strong hash algos only

2023-06-23 Thread Khem Raj
This ensures that weak algorithms are not included, which should improve the defauls to be more secure Signed-off-by: Khem Raj --- meta/recipes-core/libxcrypt/libxcrypt.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-core/libxcrypt/libxcrypt.inc