charon-tkm: Use built-in plugins instead of OpenSSL
Since the encryption has been moved into the TKM we don't rely on many cryptographic operations. Mainly SHA-1 that's used in IKEv2 (NAT-D) and for some internal hashes (cookies, message duplicate detection), and certificate and public key parsing (not the actual signature/chain verification, which is done by the TKM).
This commit is contained in:
@@ -27,9 +27,12 @@ TEST_OPTS = \
|
|||||||
PLUGINS = \
|
PLUGINS = \
|
||||||
kernel-netlink \
|
kernel-netlink \
|
||||||
pem \
|
pem \
|
||||||
|
pkcs1 \
|
||||||
|
random \
|
||||||
|
sha1 \
|
||||||
socket-default \
|
socket-default \
|
||||||
openssl \
|
vici \
|
||||||
vici
|
x509
|
||||||
|
|
||||||
all: build_charon
|
all: build_charon
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user