Skip to content

Commit 71e4285

Browse files
committed
crypto: don't build hardware engines
Compile out hardware engines. Most are stubs that dynamically load the real driver but that poses a security liability when an attacker is able to create a malicious DLL in one of the default search paths. Backport of nodejs-private/node-private#58 PR-URL: nodejs-private/node-private#69 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
1 parent 38d7258 commit 71e4285

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

deps/openssl/openssl.gyp

+5
Original file line numberDiff line numberDiff line change
@@ -1099,6 +1099,11 @@
10991099
# Microsoft's IIS, which seems to be ignoring whole ClientHello after
11001100
# seeing this extension.
11011101
'OPENSSL_NO_HEARTBEATS',
1102+
1103+
# Compile out hardware engines. Most are stubs that dynamically load
1104+
# the real driver but that poses a security liability when an attacker
1105+
# is able to create a malicious DLL in one of the default search paths.
1106+
'OPENSSL_NO_HW',
11021107
],
11031108
'direct_dependent_settings': {
11041109
'defines': [

0 commit comments

Comments
 (0)