From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 22 Aug 2025 06:34:01 +0000 (+0200)
Subject: testing: Disable deprecated features in Botan
X-Git-Tag: 6.0.3dr1~18
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=dcb53e076b6d3cfc1f99a934d16727a1ffd5f33e;p=thirdparty%2Fstrongswan.git

testing: Disable deprecated features in Botan

We keep MD5 enabled for now as we need it for TLS 1.0/1.1.  Once we
remove that we can reconsider (although, it's also needed for EAP-MD5
and since MD4 is disabled as well, which means EAP-MSCHAPv2 won't
be available, we'd be left with only EAP-GTC for simple username/password
authentication, which nobody else supports).
---

diff --git a/scripts/test.sh b/scripts/test.sh
index 7970a19964..d9b43ca079 100755
--- a/scripts/test.sh
+++ b/scripts/test.sh
@@ -21,8 +21,10 @@ build_botan()
 		BOTAN_CONFIG="--without-os-features=threads
 					  --disable-modules=locking_allocator"
 	fi
-	# disable some larger modules we don't need for the tests
+	# disable some larger modules we don't need for the tests and deprecated
+	# ones, except for MD5, which we need for TLS 1.0/1.1
 	BOTAN_CONFIG="$BOTAN_CONFIG --disable-modules=pkcs11,tls,x509,xmss
+				  --disable-deprecated-features --enable-modules=md5
 				  --prefix=$DEPS_PREFIX"
 
 	git clone https://github.com/randombit/botan.git $BOTAN_DIR &&
diff --git a/testing/scripts/recipes/011_botan.mk b/testing/scripts/recipes/011_botan.mk
index 3488bf3daf..96e5dd7c3f 100644
--- a/testing/scripts/recipes/011_botan.mk
+++ b/testing/scripts/recipes/011_botan.mk
@@ -7,10 +7,13 @@ REV = 3.7.1
 NUM_CPUS := $(shell getconf _NPROCESSORS_ONLN)
 
 # the first two are necessary due to LD, the others to reduce the build time
+# the last one enables MD5, which we need for TLS 1.0/1.1 (and possibly EAP-MD5)
 CONFIG_OPTS = \
 	--without-os-features=threads \
 	--disable-modules=locking_allocator \
-	--disable-modules=pkcs11,tls,x509,xmss
+	--disable-modules=pkcs11,tls,x509,xmss \
+	--disable-deprecated-features \
+	--enable-modules=md5
 
 all: install