projects
/
openwrt
/
staging
/
blocktrron.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
3dc0521
)
dropbear: disable RSA-SHA1 by default
author
Konstantin Demin
<rockdrilla@gmail.com>
Tue, 8 Jul 2025 16:12:26 +0000
(19:12 +0300)
committer
Paul Spooren
<mail@aparcar.org>
Fri, 11 Jul 2025 09:23:50 +0000
(11:23 +0200)
Upstream has disabled SHA-1 algorithms by default since version 2025.87.
SHA-1 has known weakness and most SSH implementations support alternatives.
Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
package/network/services/dropbear/Config.in
patch
|
blob
|
history
diff --git
a/package/network/services/dropbear/Config.in
b/package/network/services/dropbear/Config.in
index c5737c05ca40f5f2886e501732961de9e75196a1..e677ef5edca96c12389505be27d2419d1ab7e9ce 100644
(file)
--- a/
package/network/services/dropbear/Config.in
+++ b/
package/network/services/dropbear/Config.in
@@
-822,7
+822,6
@@
menu "Encryption options"
config DROPBEAR_RSA_SHA1
bool "RSA-SHA1 [WEAK]"
- default y
depends on DROPBEAR_LEGACY_COMPAT
help
This enables the following public key algorithm: