From a79cc5f0748541b0f0e3cf0588e76672b592938e Mon Sep 17 00:00:00 2001 From: Martin Elshuber Date: Mon, 27 Sep 2021 11:09:09 +0200 Subject: [PATCH] package/strongswan: add option to enable systime-fix When building embedded systems, which buildroot targets, the system often does not know the current time. However, when verifying X509 certificates this is often required. The system-fix plugin is a handy tool to configure the behavior when the current time is unknown. Signed-off-by: Martin Elshuber --- package/strongswan/Config.in | 3 +++ package/strongswan/strongswan.mk | 1 + 2 files changed, 4 insertions(+) diff --git a/package/strongswan/Config.in b/package/strongswan/Config.in index 368cd1ecc0..5b601598f5 100644 --- a/package/strongswan/Config.in +++ b/package/strongswan/Config.in @@ -73,6 +73,9 @@ config BR2_PACKAGE_STRONGSWAN_TNCCS_20 config BR2_PACKAGE_STRONGSWAN_TNCCS_DYNAMIC bool "Enable dynamic TNCCS protocol discovery module" +config BR2_PACKAGE_STRONGSWAN_SYSTIME_FIX + bool "Enable systime-fix plugin" + config BR2_PACKAGE_STRONGSWAN_EAP bool "Enable EAP protocols" select BR2_PACKAGE_GMP diff --git a/package/strongswan/strongswan.mk b/package/strongswan/strongswan.mk index 322abfbd7b..6c1f411ab5 100644 --- a/package/strongswan/strongswan.mk +++ b/package/strongswan/strongswan.mk @@ -37,6 +37,7 @@ STRONGSWAN_CONF_OPTS += \ --enable-vici=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \ --enable-swanctl=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \ --enable-wolfssl=$(if $(BR2_PACKAGE_STRONGSWAN_WOLFSSL),yes,no) \ + --enable-systime-fix=$(if $(BR2_PACKAGE_STRONGSWAN_SYSTIME_FIX),yes,no) \ --with-ipseclibdir=/usr/lib \ --with-plugindir=/usr/lib/ipsec/plugins \ --with-imcvdir=/usr/lib/ipsec/imcvs \