diff options
| author | Adriana Kobylak <anoo@us.ibm.com> | 2024-01-23 23:15:30 +0300 |
|---|---|---|
| committer | Adriana Kobylak <anoo@us.ibm.com> | 2024-02-20 22:23:18 +0300 |
| commit | 22f682c653ad51d5f5c1ac8a7acd73c44f8b291b (patch) | |
| tree | 40ac424dee3d5aa4007024449a3c019c70794395 /meta-openembedded/meta-python/recipes-devtools/python/python3-u-msgpack-python_2.8.0.bb | |
| parent | b758ca406e1f4955f222bd11d145ad96160a29d2 (diff) | |
| download | openbmc-22f682c653ad51d5f5c1ac8a7acd73c44f8b291b.tar.xz | |
dropbear: Disable the Chacha20-Poly1305 cipher
The BMC dropbear SSH server has the affected chacha20-poly1305. The
dropbear project indicates that it's affected but not vulnerable to the
terrapin attack:
```
https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L17
```
The options are to remove the affected chacha20-poly1305 algorithm, or
to enable the new strict-key exchange (strict-kex) option although the
client would also need to use strict-kex.
Go with the first option.
Tested:
Before change:
```
root@p10bmc:~# ssh -c help
ssh: Available ciphers: chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr
```
After change:
```
root@p10bmc:~# ssh -c help
ssh: Available ciphers: aes128-ctr,aes256-ctr
```
Change-Id: Ibe256cbead030ee86078d8518109c691046fb812
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>
Diffstat (limited to 'meta-openembedded/meta-python/recipes-devtools/python/python3-u-msgpack-python_2.8.0.bb')
0 files changed, 0 insertions, 0 deletions