[Buildroot] [PATCH 1/1] package/strongswan: add option to enable systime-fix

[Buildroot] [PATCH 1/1] package/strongswan: add option to enable systime-fix

[Martin Elshuber]

When building embedded systems, which buildroot targets, the system
often does not know the current time. However, when verifying X509
certificates this is often required.

The system-fix plugin is a handy tool to configure the behavior when
the current time is unknown.

Signed-off-by: Martin Elshuber <martin.elshuber@theobroma-systems.com>
---
 package/strongswan/Config.in     | 3 +++
 package/strongswan/strongswan.mk | 1 +
 2 files changed, 4 insertions(+)

diff --git a/package/strongswan/Config.in b/package/strongswan/Config.in
index 368cd1ecc0..5b601598f5 100644
--- a/package/strongswan/Config.in
+++ b/package/strongswan/Config.in
@@ -73,6 +73,9 @@ config BR2_PACKAGE_STRONGSWAN_TNCCS_20
 config BR2_PACKAGE_STRONGSWAN_TNCCS_DYNAMIC
 	bool "Enable dynamic TNCCS protocol discovery module"
 
+config BR2_PACKAGE_STRONGSWAN_SYSTIME_FIX
+	bool "Enable systime-fix plugin"
+
 config BR2_PACKAGE_STRONGSWAN_EAP
 	bool "Enable EAP protocols"
 	select BR2_PACKAGE_GMP
diff --git a/package/strongswan/strongswan.mk b/package/strongswan/strongswan.mk
index 322abfbd7b..6c1f411ab5 100644
--- a/package/strongswan/strongswan.mk
+++ b/package/strongswan/strongswan.mk
@@ -37,6 +37,7 @@ STRONGSWAN_CONF_OPTS += \
 	--enable-vici=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \
 	--enable-swanctl=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \
 	--enable-wolfssl=$(if $(BR2_PACKAGE_STRONGSWAN_WOLFSSL),yes,no) \
+	--enable-systime-fix=$(if $(BR2_PACKAGE_STRONGSWAN_SYSTIME_FIX),yes,no) \
 	--with-ipseclibdir=/usr/lib \
 	--with-plugindir=/usr/lib/ipsec/plugins \
 	--with-imcvdir=/usr/lib/ipsec/imcvs \
-- 
2.30.2

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/strongswan: add option to enable systime-fix

[Arnout Vandecappelle]

On 27/09/2021 11:09, Martin Elshuber wrote:
> When building embedded systems, which buildroot targets, the system
> often does not know the current time. However, when verifying X509
> certificates this is often required.
> 
> The system-fix plugin is a handy tool to configure the behavior when
> the current time is unknown.
> 
> Signed-off-by: Martin Elshuber <martin.elshuber@theobroma-systems.com>

  Applied to master, thanks.

  Regards,
  Arnout

> ---
>   package/strongswan/Config.in     | 3 +++
>   package/strongswan/strongswan.mk | 1 +
>   2 files changed, 4 insertions(+)
> 
> diff --git a/package/strongswan/Config.in b/package/strongswan/Config.in
> index 368cd1ecc0..5b601598f5 100644
> --- a/package/strongswan/Config.in
> +++ b/package/strongswan/Config.in
> @@ -73,6 +73,9 @@ config BR2_PACKAGE_STRONGSWAN_TNCCS_20
>   config BR2_PACKAGE_STRONGSWAN_TNCCS_DYNAMIC
>   	bool "Enable dynamic TNCCS protocol discovery module"
>   
> +config BR2_PACKAGE_STRONGSWAN_SYSTIME_FIX
> +	bool "Enable systime-fix plugin"
> +
>   config BR2_PACKAGE_STRONGSWAN_EAP
>   	bool "Enable EAP protocols"
>   	select BR2_PACKAGE_GMP
> diff --git a/package/strongswan/strongswan.mk b/package/strongswan/strongswan.mk
> index 322abfbd7b..6c1f411ab5 100644
> --- a/package/strongswan/strongswan.mk
> +++ b/package/strongswan/strongswan.mk
> @@ -37,6 +37,7 @@ STRONGSWAN_CONF_OPTS += \
>   	--enable-vici=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \
>   	--enable-swanctl=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \
>   	--enable-wolfssl=$(if $(BR2_PACKAGE_STRONGSWAN_WOLFSSL),yes,no) \
> +	--enable-systime-fix=$(if $(BR2_PACKAGE_STRONGSWAN_SYSTIME_FIX),yes,no) \
>   	--with-ipseclibdir=/usr/lib \
>   	--with-plugindir=/usr/lib/ipsec/plugins \
>   	--with-imcvdir=/usr/lib/ipsec/imcvs \
> 
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [External] [PATCH 1/1] package/strongswan: add option to enable systime-fix

[Weber, Matthew L Collins via buildroot]

Martin,

> From: buildroot <buildroot-bounces@buildroot.org> on behalf of Martin Elshuber <martin.elshuber@theobroma-systems.com>
> Sent: Monday, September 27, 2021 4:09 AM
> To: buildroot@buildroot.org <buildroot@buildroot.org>
> Cc: Jérôme Pouiller <jezz@sysmic.org>; Martin Elshuber <martin.elshuber@theobroma-systems.com>
> Subject: [External] [Buildroot] [PATCH 1/1] package/strongswan: add option to enable systime-fix 
> 
> When building embedded systems, which buildroot targets, the system
> often does not know the current time. However, when verifying X509
> certificates this is often required.

https://wiki.strongswan.org/projects/strongswan/wiki/SystimeFixPlugin

Reviewed-by: Matthew Weber <matthew.weber@rockwellcollins.com>
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot