From b1ce8772367ff7f8e2fd09bd956b9ae135081835 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Thu, 1 Dec 2022 17:58:08 +0100 Subject: [PATCH] charon-tkm: Use built-in plugins instead of OpenSSL Since the encryption has been moved into the TKM we don't rely on many cryptographic operations. Mainly SHA-1 that's used in IKEv2 (NAT-D) and for some internal hashes (cookies, message duplicate detection), and certificate and public key parsing (not the actual signature/chain verification, which is done by the TKM). --- src/charon-tkm/Makefile.am | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/src/charon-tkm/Makefile.am b/src/charon-tkm/Makefile.am index 95e874591..03648341b 100644 --- a/src/charon-tkm/Makefile.am +++ b/src/charon-tkm/Makefile.am @@ -27,9 +27,12 @@ TEST_OPTS = \ PLUGINS = \ kernel-netlink \ pem \ + pkcs1 \ + random \ + sha1 \ socket-default \ - openssl \ - vici + vici \ + x509 all: build_charon