From dee01d019ba9743b2784b417155601d10c173a66 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 20 Jun 2016 18:18:46 +0200 Subject: [PATCH] testing: Only load selected plugins in swanctl The main issue is that the ldap and curl plugins, or rather the libraries they use, initialize GnuTLS (curl, strangely, even when it is, by its own account, linked against OpenSSL). Some of these allocations are only freed once the libraries are unloaded. This means that the leak detective causes invalid frees when swanctl is terminated and libraries are unloaded after the leak detective is already deinitialized. --- testing/hosts/default/etc/strongswan.conf.testing | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/testing/hosts/default/etc/strongswan.conf.testing b/testing/hosts/default/etc/strongswan.conf.testing index 55efbe7d1..3fc113b77 100644 --- a/testing/hosts/default/etc/strongswan.conf.testing +++ b/testing/hosts/default/etc/strongswan.conf.testing @@ -1,3 +1,7 @@ +swanctl { + load = x509 acert pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl +} + charon { retransmit_tries = 2 retransmit_timeout = 1.0