set OpenSSL 1.1.0 DEFAULT cipher list to secure value

[people/pmueller/ipfire-2.x.git] / lfs / openssl

diff --git a/lfs/openssl b/lfs/openssl
index f1dccc76c41ff7f8931186c03696c3039df519b3..6e17e79e69fc32a2a30c4b72bd27aec280d871bd 100644 (file)
--- a/lfs/openssl
+++ b/lfs/openssl
@@ -128,7 +128,11 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        cd $(DIR_APP) && find crypto/ -name Makefile -exec \
                sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i {} \;
 
-       cd $(DIR_APP) && ./Configure $(CONFIGURE_OPTIONS)
+       cd $(DIR_APP) && ./Configure $(CONFIGURE_OPTIONS) \
+               $(CFLAGS) $(LDFLAGS)
+
+       # Apply patch for changing DEFAULT cipher list (needed after configure)
+       cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.1.0g-weak-ciphers.patch
 
        cd $(DIR_APP) && make depend
        cd $(DIR_APP) && make