diff --git a/common/recipes-connectivity/openssl/openssl_%.bbappend b/common/recipes-connectivity/openssl/openssl_%.bbappend
new file mode 100644
index 0000000..a18a552
--- /dev/null
+++ b/common/recipes-connectivity/openssl/openssl_%.bbappend
@@ -0,0 +1,11 @@
+
+# General config settings.
+EXTRA_OECONF_append = " shared no-hw no-err no-psk no-srp no-engines "
+
+# Disable SSL (keep TLS only).
+EXTRA_OECONF_append = " no-ssl2 no-ssl3 "
+
+# Disable various algorithms.
+EXTRA_OECONF_append = " no-idea no-md2 no-mdc2 no-rc5 no-md4 \
+        no-ripemd160 no-rmd160 no-whirlpool no-sha0 no-camellia \
+        no-rc2 no-rc4 no-bf no-cast no-seed no-gost "