From: Glenn Strauss <gstrauss@gluelogic.com>
Date: Sat, 22 Oct 2022 17:09:14 +0000 (-0400)
Subject: libmbedtls: disable older RSA ciphers
X-Git-Tag: v23.05.0-rc1~1785
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=106425225953164ca45569c04d8147f16641a696;p=thirdparty%2Fopenwrt.git

libmbedtls: disable older RSA ciphers

disable older RSA ciphers

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
---

diff --git a/package/libs/mbedtls/Config.in b/package/libs/mbedtls/Config.in
index 067a9aeb788..ffabd799d32 100644
--- a/package/libs/mbedtls/Config.in
+++ b/package/libs/mbedtls/Config.in
@@ -62,11 +62,11 @@ config MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
 
 config MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
 	bool "MBEDTLS_KEY_EXCHANGE_RSA_ENABLED"
-	default y
+	default n
 
 config MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
 	bool "MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED"
-	default y
+	default n
 
 config MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
 	bool "MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED"