Skip to content

Commit

Permalink
crypto: don't build hardware engines
Browse files Browse the repository at this point in the history
Compile out hardware engines.  Most are stubs that dynamically load
the real driver but that poses a security liability when an attacker
is able to create a malicious DLL in one of the default search paths.

Backport of
nodejs-private/node-private#58

PR-URL: nodejs-private/node-private#69
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
  • Loading branch information
rvagg committed Sep 27, 2016
1 parent 38d7258 commit 71e4285
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions deps/openssl/openssl.gyp
Original file line number Diff line number Diff line change
Expand Up @@ -1099,6 +1099,11 @@
# Microsoft's IIS, which seems to be ignoring whole ClientHello after
# seeing this extension.
'OPENSSL_NO_HEARTBEATS',

# Compile out hardware engines. Most are stubs that dynamically load
# the real driver but that poses a security liability when an attacker
# is able to create a malicious DLL in one of the default search paths.
'OPENSSL_NO_HW',
],
'direct_dependent_settings': {
'defines': [
Expand Down

0 comments on commit 71e4285

Please sign in to comment.