Last time we talked about this I thought we would need to change something in openssl build settings to make the openssl binary get built just for this solution, and that was what got rejected. But actually now I see (or perhaps it got changed) that the openssl binary is built anyways, in any build that already relies on openssl. So my suggestion is to enable this feature. Like I said in builds with openssl it will make everything more secure in a transparent manner, and in builds without openssl it will display a warning just like today. I wouldn't consider it a hacky solution since this is the official solution for this issue. This is also exacerbated due to the fact that there are no other alternatives for secure download from CLI (ex. the sato build doesn't contain the "curl" standalone binary)
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#150717): https://lists.openembedded.org/g/openembedded-core/message/150717 Mute This Topic: https://lists.openembedded.org/mt/82240467/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
