charon-tkm: Use built-in plugins instead of OpenSSL
Since the encryption has been moved into the TKM we don't rely on many cryptographic operations. Mainly SHA-1 that's used in IKEv2 (NAT-D) and for some internal hashes (cookies, message duplicate detection), and certificate and public key parsing (not the actual signature/chain verification, which is done by the TKM).
This commit is contained in:
1 parent
98be74914d
commit
b1ce877236
1 file changed
+5
-2
@@ -27,9 +27,12 @@ TEST_OPTS = \
|
||||
PLUGINS = \
|
||||
kernel-netlink \
|
||||
pem \
|
||||
pkcs1 \
|
||||
random \
|
||||
sha1 \
|
||||
socket-default \
|
||||
openssl \
|
||||
vici
|
||||
vici \
|
||||
x509
|
||||
|
||||
all: build_charon
|
||||
|
||||
|
||||
Reference in new issue
Block a user