libmbedtls: disable older RSA ciphers
authorGlenn Strauss <gstrauss@gluelogic.com>
Sat, 22 Oct 2022 17:09:14 +0000 (13:09 -0400)
committerHauke Mehrtens <hauke@hauke-m.de>
Sun, 13 Nov 2022 20:51:22 +0000 (21:51 +0100)
disable older RSA ciphers

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
package/libs/mbedtls/Config.in

index 067a9aeb788ca37cc90c0379c5f3f9603f569c5f..ffabd799d32b64aa206420f61fd4fcf23c948efa 100644 (file)
@@ -62,11 +62,11 @@ config MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
 
 config MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
        bool "MBEDTLS_KEY_EXCHANGE_RSA_ENABLED"
-       default y
+       default n
 
 config MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
        bool "MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED"
-       default y
+       default n
 
 config MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
        bool "MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED"