sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-12-07 00:00:13 -05:00
Code Issues Projects Releases Wiki Activity

testing: Disable deprecated features in Botan

Browse Source 
We keep MD5 enabled for now as we need it for TLS 1.0/1.1.  Once we
remove that we can reconsider (although, it's also needed for EAP-MD5
and since MD4 is disabled as well, which means EAP-MSCHAPv2 won't
be available, we'd be left with only EAP-GTC for simple username/password
authentication, which nobody else supports).
This commit is contained in:
Tobias Brunner 2025-08-22 08:34:01 +02:00
parent 8139256aae
commit dcb53e076b
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
scripts/test.sh
View File

@ -21,8 +21,10 @@ build_botan()
BOTAN_CONFIG="--without-os-features=threads
--disable-modules=locking_allocator"
fi
# disable some larger modules we don't need for the tests
# disable some larger modules we don't need for the tests and deprecated
# ones, except for MD5, which we need for TLS 1.0/1.1
BOTAN_CONFIG="$BOTAN_CONFIG --disable-modules=pkcs11,tls,x509,xmss
--disable-deprecated-features --enable-modules=md5
--prefix=$DEPS_PREFIX"
git clone https://github.com/randombit/botan.git $BOTAN_DIR &&

5
testing/scripts/recipes/011_botan.mk
View File

@ -7,10 +7,13 @@ REV = 3.7.1
NUM_CPUS := $(shell getconf _NPROCESSORS_ONLN)
# the first two are necessary due to LD, the others to reduce the build time
# the last one enables MD5, which we need for TLS 1.0/1.1 (and possibly EAP-MD5)
CONFIG_OPTS = \
--without-os-features=threads \
--disable-modules=locking_allocator \
--disable-modules=pkcs11,tls,x509,xmss
--disable-modules=pkcs11,tls,x509,xmss \
--disable-deprecated-features \
--enable-modules=md5
all: install