dropbear: disable two weak kex/mac algorithms

[openwrt/openwrt.git] / package / network / services / dropbear / Makefile

diff --git a/package/network/services/dropbear/Makefile b/package/network/services/dropbear/Makefile
index 75dee77af0e30cc193534e86a9a3b90d081c538e..51961d3c3dd10d096887810048b4065876287364 100644 (file)
--- a/package/network/services/dropbear/Makefile
+++ b/package/network/services/dropbear/Makefile
@@ -110,12 +110,16 @@ CONFIGURE_ARGS += \
 # - DROPBEAR_CLI_NETCAT
 # - DROPBEAR_DSS
 # - DO_MOTD
+# - DROPBEAR_DH_GROUP14_SHA1
+# - DROPBEAR_SHA1_HMAC
 DB_OPT_COMMON = \
        !!LOCAL_IDENT,"SSH-2.0-dropbear" \
        DEFAULT_PATH,"$(TARGET_INIT_PATH)" \
        DROPBEAR_DSS,0 \
        DROPBEAR_CLI_NETCAT,0 \
        DO_MOTD,0 \
+       DROPBEAR_DH_GROUP14_SHA1,0 \
+       DROPBEAR_SHA1_HMAC,0 \
 
 
 ##############################################################################