[Buildroot] [PATCH 1/1] package/strongswan: add option to enable systime-fix

Martin Elshuber martin.elshuber at theobroma-systems.com
Mon Sep 27 09:09:09 UTC 2021


When building embedded systems, which buildroot targets, the system
often does not know the current time. However, when verifying X509
certificates this is often required.

The system-fix plugin is a handy tool to configure the behavior when
the current time is unknown.

Signed-off-by: Martin Elshuber <martin.elshuber at theobroma-systems.com>
---
 package/strongswan/Config.in     | 3 +++
 package/strongswan/strongswan.mk | 1 +
 2 files changed, 4 insertions(+)

diff --git a/package/strongswan/Config.in b/package/strongswan/Config.in
index 368cd1ecc0..5b601598f5 100644
--- a/package/strongswan/Config.in
+++ b/package/strongswan/Config.in
@@ -73,6 +73,9 @@ config BR2_PACKAGE_STRONGSWAN_TNCCS_20
 config BR2_PACKAGE_STRONGSWAN_TNCCS_DYNAMIC
 	bool "Enable dynamic TNCCS protocol discovery module"
 
+config BR2_PACKAGE_STRONGSWAN_SYSTIME_FIX
+	bool "Enable systime-fix plugin"
+
 config BR2_PACKAGE_STRONGSWAN_EAP
 	bool "Enable EAP protocols"
 	select BR2_PACKAGE_GMP
diff --git a/package/strongswan/strongswan.mk b/package/strongswan/strongswan.mk
index 322abfbd7b..6c1f411ab5 100644
--- a/package/strongswan/strongswan.mk
+++ b/package/strongswan/strongswan.mk
@@ -37,6 +37,7 @@ STRONGSWAN_CONF_OPTS += \
 	--enable-vici=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \
 	--enable-swanctl=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \
 	--enable-wolfssl=$(if $(BR2_PACKAGE_STRONGSWAN_WOLFSSL),yes,no) \
+	--enable-systime-fix=$(if $(BR2_PACKAGE_STRONGSWAN_SYSTIME_FIX),yes,no) \
 	--with-ipseclibdir=/usr/lib \
 	--with-plugindir=/usr/lib/ipsec/plugins \
 	--with-imcvdir=/usr/lib/ipsec/imcvs \
-- 
2.30.2



More information about the buildroot mailing list