configure: Load fetcher plugins after crypto base plugins

Some fetcher plugins (such as curl) might build upon OpenSSL to implement
HTTPS fetching. As we set (and can't unset) threading callbacks in our
openssl plugin, we must ensure that OpenSSL functions don't get called after
openssl plugin unloading.

We achieve that by loading curl and all other fetcher plugins after the base
crypto plugins, including openssl.

testing/tests/openssl-ikev2/alg-aes-gcm/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 random nonce revocation openssl stroke kernel-netlink socket-default updown
+  load = pem pkcs1 random nonce revocation openssl curl stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-aes-gcm/hosts/dave/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac gcm stroke kernel-netlink socket-default updown
+  load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac gcm stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-aes-gcm/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 random nonce revocation openssl stroke kernel-netlink socket-default updown
+  load = pem pkcs1 random nonce revocation openssl curl stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-blowfish/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-blowfish/hosts/dave/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-blowfish/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-camellia/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac xcbc stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac xcbc stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-camellia/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac xcbc stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac xcbc stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/dave/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp pem pkcs1 x509 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = aes des sha1 sha2 md5 pem pkcs1 gmp pem pkcs1 x509 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-brainpool-high/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/dave/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp pem pkcs1 x509 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = aes des sha1 sha2 md5 pem pkcs1 gmp pem pkcs1 x509 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-brainpool-low/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-high/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-high/hosts/dave/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp pem pkcs1 x509 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = aes des sha1 sha2 md5 pem pkcs1 gmp pem pkcs1 x509 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-high/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-low/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-low/hosts/dave/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp pem pkcs1 x509 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = aes des sha1 sha2 md5 pem pkcs1 gmp pem pkcs1 x509 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/alg-ecp-low/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/critical-extension/hosts/moon/etc/strongswan.conf

@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 random nonce openssl revocation hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 random nonce openssl revocation curl hmac stroke kernel-netlink socket-default updown
   multiple_authentication = no
 
   x509 {

testing/tests/openssl-ikev2/critical-extension/hosts/sun/etc/strongswan.conf

@@ -1,6 +1,6 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 random nonce openssl revocation hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 random nonce openssl curl revocation hmac stroke kernel-netlink socket-default updown
   multiple_authentication = no
 }

testing/tests/openssl-ikev2/ecdsa-certs/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/ecdsa-certs/hosts/dave/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/ecdsa-certs/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 pkcs8 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 pkcs8 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/dave/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 pkcs8 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 pkcs8 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/ecdsa-pkcs8/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 pkcs8 openssl revocation random nonce hmac stroke kernel-netlink socket-default updown
+  load = pem pkcs1 pkcs8 openssl curl revocation random nonce hmac stroke kernel-netlink socket-default updown
 }

testing/tests/openssl-ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,6 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem nonce revocation openssl stroke kernel-netlink socket-default updown
+  load = pem nonce revocation openssl curl stroke kernel-netlink socket-default updown
   multiple_authentication = no
 }

testing/tests/openssl-ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf

@@ -1,6 +1,6 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem nonce revocation openssl stroke kernel-netlink socket-default updown
+  load = pem nonce revocation openssl curl stroke kernel-netlink socket-default updown
   multiple_authentication = no
 }

testing/tests/openssl-ikev2/rw-cert/hosts/carol/etc/strongswan.conf

@@ -1,11 +1,10 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl test-vectors pem pkcs1 openssl revocation nonce xcbc cmac ctr ccm stroke kernel-netlink socket-default updown
+  load = test-vectors pem pkcs1 openssl curl revocation nonce xcbc cmac ctr ccm stroke kernel-netlink socket-default updown
 
   integrity_test = yes
   crypto_test {
     on_add = yes
   }
 }
-

testing/tests/openssl-ikev2/rw-cert/hosts/dave/etc/strongswan.conf

@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl test-vectors aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc cmac ctr ccm gcm stroke kernel-netlink socket-default updown
+  load = test-vectors aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac xcbc cmac ctr ccm gcm stroke kernel-netlink socket-default updown
 
   integrity_test = yes
   crypto_test {

testing/tests/openssl-ikev2/rw-cert/hosts/moon/etc/strongswan.conf

@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl test-vectors pem pkcs1 openssl revocation nonce xcbc cmac ctr ccm stroke kernel-netlink socket-default updown
+  load = test-vectors pem pkcs1 openssl curl revocation nonce xcbc cmac ctr ccm stroke kernel-netlink socket-default updown
 
   integrity_test = yes
   crypto_test {

testing/tests/openssl-ikev2/rw-eap-tls-only/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,6 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 random nonce openssl revocation stroke kernel-netlink socket-default eap-tls updown
+  load = pem pkcs1 random nonce openssl curl revocation stroke kernel-netlink socket-default eap-tls updown
   multiple_authentication=no
 }

testing/tests/openssl-ikev2/rw-eap-tls-only/hosts/moon/etc/strongswan.conf

@@ -1,11 +1,10 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = curl pem pkcs1 random nonce openssl revocation stroke kernel-netlink socket-default eap-tls updown
+  load = pem pkcs1 random nonce openssl curl revocation stroke kernel-netlink socket-default eap-tls updown
   multiple_authentication=no
 }
 
 libtls {
   suites = TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
 }
-

testing/tests/openssl-ikev2/rw-suite-b-128/hosts/carol/etc/strongswan.conf

@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = test-vectors soup pem pkcs1 pkcs8 random nonce x509 revocation openssl stroke kernel-netlink socket-default
+  load = test-vectors pem pkcs1 pkcs8 random nonce x509 revocation openssl soup stroke kernel-netlink socket-default
 
   initiator_only = yes
   integrity_test = yes

testing/tests/openssl-ikev2/rw-suite-b-128/hosts/dave/etc/strongswan.conf

@@ -1,11 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = test-vectors soup pem pkcs1 pkcs8 random nonce x509 revocation openssl stroke kernel-netlink socket-default
+  load = test-vectors pem pkcs1 pkcs8 random nonce x509 revocation openssl soup stroke kernel-netlink socket-default
 
   retransmit_timeout = 2
   retransmit_base = 1.5
-  retransmit_tries = 3 
+  retransmit_tries = 3
   initiator_only = yes
   integrity_test = yes
 

testing/tests/openssl-ikev2/rw-suite-b-128/hosts/moon/etc/strongswan.conf

@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = test-vectors soup pem pkcs1 pkcs8 random nonce x509 revocation openssl stroke kernel-netlink socket-default
+  load = test-vectors pem pkcs1 pkcs8 random nonce x509 revocation openssl soup stroke kernel-netlink socket-default
 
   integrity_test = yes
 
@@ -12,7 +12,7 @@ charon {
 
   plugins {
     openssl {
-      fips_mode = 2 
+      fips_mode = 2
     }
   }
 }

testing/tests/openssl-ikev2/rw-suite-b-192/hosts/carol/etc/strongswan.conf

@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = test-vectors soup pem pkcs1 pkcs8 random nonce x509 revocation openssl stroke kernel-netlink socket-default
+  load = test-vectors pem pkcs1 pkcs8 random nonce x509 revocation openssl soup stroke kernel-netlink socket-default
 
   initiator_only = yes
   integrity_test = yes

testing/tests/openssl-ikev2/rw-suite-b-192/hosts/dave/etc/strongswan.conf

@@ -1,11 +1,11 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = test-vectors soup pem pkcs1 pkcs8 random nonce x509 revocation openssl stroke kernel-netlink socket-default
+  load = test-vectors pem pkcs1 pkcs8 random nonce x509 revocation openssl soup stroke kernel-netlink socket-default
 
   retransmit_timeout = 2
   retransmit_base = 1.5
-  retransmit_tries = 3 
+  retransmit_tries = 3
   initiator_only = yes
   integrity_test = yes
 

testing/tests/openssl-ikev2/rw-suite-b-192/hosts/moon/etc/strongswan.conf

@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = test-vectors soup pem pkcs1 pkcs8 random nonce x509 revocation openssl stroke kernel-netlink socket-default
+  load = test-vectors pem pkcs1 pkcs8 random nonce x509 revocation openssl soup stroke kernel-netlink socket-default
 
   integrity_test = yes
 
@@ -12,7 +12,7 @@ charon {
 
   plugins {
     openssl {
-      fips_mode = 2 
+      fips_mode = 2
     }
   }
 }