From: Jacob Stiffler <j-stiffler@ti.com>
To: Sam Nelson <sam.nelson@ti.com>, <meta-arago@arago-project.org>
Subject: Re: [PATCH] strongswan: Add back config patch for pkcs11 in 5.2.1 format
Date: Tue, 3 Nov 2015 08:18:25 -0500 [thread overview]
Message-ID: <5638B421.5040603@ti.com> (raw)
In-Reply-To: <1445639140-9135-1-git-send-email-sam.nelson@ti.com>
On 10/23/2015 6:25 PM, Sam Nelson wrote:
> - 5.2.1 version of strongswan expects config in changed format.
> This patch adds the pkcs11_plugin.conf file to adapt to that.
>
> Signed-off-by: Sam Nelson <sam.nelson@ti.com>
> ---
> .../strongswan/files/pkcs11_plugin.conf | 15 +++++++++++++++
> .../strongswan/files/strongswan_libsecstore.patch | 16 ----------------
> .../strongswan/strongswan_%.bbappend | 4 ++--
> 3 files changed, 17 insertions(+), 18 deletions(-)
> create mode 100644 meta-arago-distro/recipes-support/strongswan/files/pkcs11_plugin.conf
> delete mode 100644 meta-arago-distro/recipes-support/strongswan/files/strongswan_libsecstore.patch
>
> diff --git a/meta-arago-distro/recipes-support/strongswan/files/pkcs11_plugin.conf b/meta-arago-distro/recipes-support/strongswan/files/pkcs11_plugin.conf
> new file mode 100644
> index 0000000..6d8c1cb
> --- /dev/null
> +++ b/meta-arago-distro/recipes-support/strongswan/files/pkcs11_plugin.conf
> @@ -0,0 +1,15 @@
> +# strongswan.conf - strongSwan configuration file
> +libstrongswan {
> +
> + # set to no, the DH exponent size is optimized
> + # dh_exponent_ansi_x9_42 = no
> + plugins {
> + pkcs11 {
> + modules {
> + secstore {
> + path = /usr/lib/softhsm/libsecstore.so.1
> + }
> + }
> + }
> + }
> +}
> diff --git a/meta-arago-distro/recipes-support/strongswan/files/strongswan_libsecstore.patch b/meta-arago-distro/recipes-support/strongswan/files/strongswan_libsecstore.patch
> deleted file mode 100644
> index c16b05e..0000000
> --- a/meta-arago-distro/recipes-support/strongswan/files/strongswan_libsecstore.patch
> +++ /dev/null
> @@ -1,16 +0,0 @@
> ---- strongswan-5.0.0/src/strongswan.conf 2010-10-22 10:33:30.000000000 -0400
> -+++ strongswan-5.0.0.libsecstore/src/strongswan.conf 2014-04-03 18:31:17.228569896 -0400
> -@@ -31,4 +31,13 @@
> -
> - # set to no, the DH exponent size is optimized
> - # dh_exponent_ansi_x9_42 = no
> -+ plugins {
> -+ pkcs11 {
> -+ modules {
> -+ secstore {
> -+ path = /usr/lib/softhsm/libsecstore.so.1
> -+ }
> -+ }
> -+ }
> -+ }
> - }
> diff --git a/meta-arago-distro/recipes-support/strongswan/strongswan_%.bbappend b/meta-arago-distro/recipes-support/strongswan/strongswan_%.bbappend
> index f065a63..74829e7 100644
> --- a/meta-arago-distro/recipes-support/strongswan/strongswan_%.bbappend
> +++ b/meta-arago-distro/recipes-support/strongswan/strongswan_%.bbappend
> @@ -1,4 +1,4 @@
> -PR_append = "-arago1"
> +PR_append = "-arago2"
> FILESEXTRAPATHS_prepend := "${THISDIR}/files:"
>
> DEPENDS_remove = "gmp"
> @@ -11,4 +11,4 @@ EXTRA_OECONF += "--disable-gmp \
> --disable-tools \
> "
>
> -#SRC_URI += "file://strongswan_libsecstore.patch"
> +SRC_URI += "file://pkcs11_plugin.conf"
How is this file being installed?
Do you know if it is compatible with strongswan 5.3.1?
- Jake
next prev parent reply other threads:[~2015-11-03 13:18 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-10-23 22:25 [PATCH] strongswan: Add back config patch for pkcs11 in 5.2.1 format Sam Nelson
2015-11-03 13:18 ` Jacob Stiffler [this message]
2015-11-03 19:37 ` Nelson, Sam
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5638B421.5040603@ti.com \
--to=j-stiffler@ti.com \
--cc=meta-arago@arago-project.org \
--cc=sam.nelson@ti.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.