From 5cc47c11f25cbed5a76efe591940e1bcb897ce3c Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 15 Feb 2022 14:29:36 +0100 Subject: [PATCH] android: Build and load kdf plugin for prf+ Not necessary with newer versions of OpenSSL, but our BoringSSL release does not support HKDF yet. --- Android.mk | 2 +- src/frontends/android/app/src/main/jni/Android.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Android.mk b/Android.mk index 69869dfe63..a69599598f 100644 --- a/Android.mk +++ b/Android.mk @@ -17,7 +17,7 @@ include $(CLEAR_VARS) # this is the list of plugins that are built into libstrongswan and charon # also these plugins are loaded by default (if not changed in strongswan.conf) strongswan_CHARON_PLUGINS := android-log openssl fips-prf random nonce pubkey \ - pkcs1 pkcs8 pem xcbc hmac kernel-netlink socket-default android-dns \ + pkcs1 pkcs8 pem xcbc hmac kdf kernel-netlink socket-default android-dns \ stroke eap-identity eap-mschapv2 eap-md5 eap-gtc ifneq ($(strongswan_BUILD_SCEPCLIENT),) diff --git a/src/frontends/android/app/src/main/jni/Android.mk b/src/frontends/android/app/src/main/jni/Android.mk index 54c4bb947e..dcfe5f7803 100644 --- a/src/frontends/android/app/src/main/jni/Android.mk +++ b/src/frontends/android/app/src/main/jni/Android.mk @@ -6,7 +6,7 @@ include $(CLEAR_VARS) strongswan_USE_BYOD := true strongswan_CHARON_PLUGINS := android-log openssl fips-prf random nonce pubkey \ - chapoly curve25519 pkcs1 pkcs8 pem xcbc hmac socket-default revocation \ + chapoly curve25519 pkcs1 pkcs8 pem xcbc hmac kdf socket-default revocation \ eap-identity eap-mschapv2 eap-md5 eap-gtc eap-tls x509 ifneq ($(strongswan_USE_BYOD),) -- 2.47.2