Keep the kdf plugin because of AES-XCBC (and CAMELLIA-XCBC, which is now
supported due to OpenSSL). Other plugins like fips-prf, pubkey or pkcs8
were never actually used by the app. The random plugin might have been
necessary with early versions.
# MainActivity.java)
strongswan_USE_BYOD := true
-strongswan_CHARON_PLUGINS := android-log openssl fips-prf random nonce pubkey \
- chapoly curve25519 pkcs1 pkcs8 pem xcbc hmac kdf socket-default revocation \
- eap-identity eap-mschapv2 eap-md5 eap-gtc eap-tls x509
+strongswan_CHARON_PLUGINS := android-log socket-default openssl nonce \
+ pkcs1 pem x509 xcbc kdf revocation \
+ eap-identity eap-mschapv2 eap-md5 eap-gtc eap-tls
ifneq ($(strongswan_USE_BYOD),)
strongswan_BYOD_PLUGINS := eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20