set OpenSSL 1.1.0 DEFAULT cipher list to secure value

[people/pmueller/ipfire-2.x.git] / lfs / openssl

diff --git a/lfs/openssl b/lfs/openssl
index bd70980397b0d301ac5e2747a5f17ae1b526b7e2..6e17e79e69fc32a2a30c4b72bd27aec280d871bd 100644 (file)
--- a/lfs/openssl
+++ b/lfs/openssl
@@ -131,6 +131,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        cd $(DIR_APP) && ./Configure $(CONFIGURE_OPTIONS) \
                $(CFLAGS) $(LDFLAGS)
 
+       # Apply patch for changing DEFAULT cipher list (needed after configure)
+       cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.1.0g-weak-ciphers.patch
+
        cd $(DIR_APP) && make depend
        cd $(DIR_APP) && make