openssl: reduce crypto algorithms used
Resolves openbmc/meta-phosphor#9.
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
diff --git a/meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend b/meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend
new file mode 100644
index 0000000..a18a552
--- /dev/null
+++ b/meta-phosphor/common/recipes-connectivity/openssl/openssl_%.bbappend
@@ -0,0 +1,11 @@
+
+# General config settings.
+EXTRA_OECONF_append = " shared no-hw no-err no-psk no-srp no-engines "
+
+# Disable SSL (keep TLS only).
+EXTRA_OECONF_append = " no-ssl2 no-ssl3 "
+
+# Disable various algorithms.
+EXTRA_OECONF_append = " no-idea no-md2 no-mdc2 no-rc5 no-md4 \
+ no-ripemd160 no-rmd160 no-whirlpool no-sha0 no-camellia \
+ no-rc2 no-rc4 no-bf no-cast no-seed no-gost "