- Enable pkcs11 plugin to add softhsm for secure store

Signed-off-by: Sam Nelson <[email protected]>
---
 .../strongswan/files/strongswan_libsecstore.patch  |   16 ++++++++++++++++
 .../strongswan/strongswan_5.1.1.bbappend           |    6 ++++++
 2 files changed, 22 insertions(+)
 create mode 100644 
meta-arago-extras/recipes-support/strongswan/files/strongswan_libsecstore.patch

diff --git 
a/meta-arago-extras/recipes-support/strongswan/files/strongswan_libsecstore.patch
 
b/meta-arago-extras/recipes-support/strongswan/files/strongswan_libsecstore.patch
new file mode 100644
index 0000000..c16b05e
--- /dev/null
+++ 
b/meta-arago-extras/recipes-support/strongswan/files/strongswan_libsecstore.patch
@@ -0,0 +1,16 @@
+--- strongswan-5.0.0/src/strongswan.conf       2010-10-22 10:33:30.000000000 
-0400
++++ strongswan-5.0.0.libsecstore/src/strongswan.conf   2014-04-03 
18:31:17.228569896 -0400
+@@ -31,4 +31,13 @@
+ 
+       #  set to no, the DH exponent size is optimized
+       #  dh_exponent_ansi_x9_42 = no
++  plugins {
++    pkcs11 {
++      modules {
++        secstore {
++          path = /usr/lib/softhsm/libsecstore.so.1
++        }
++      }
++    }
++  }
+ }
diff --git 
a/meta-arago-extras/recipes-support/strongswan/strongswan_5.1.1.bbappend 
b/meta-arago-extras/recipes-support/strongswan/strongswan_5.1.1.bbappend
index ca19b68..22c8550 100644
--- a/meta-arago-extras/recipes-support/strongswan/strongswan_5.1.1.bbappend
+++ b/meta-arago-extras/recipes-support/strongswan/strongswan_5.1.1.bbappend
@@ -1,8 +1,14 @@
 PR_append = "-arago0"
+FILESEXTRAPATHS_prepend := "${THISDIR}/files:"
 
 DEPENDS = "openssl flex-native flex bison-native"
 
+SRC_URI += "file://strongswan_libsecstore.patch"
+
 EXTRA_OECONF = "--disable-gmp \
         --enable-openssl \
         --without-lib-prefix \
+        --enable-ctr \
+        --enable-pkcs11 \
+        --disable-tools \
 "
-- 
1.7.9.5

_______________________________________________
meta-arago mailing list
[email protected]
http://arago-project.org/cgi-bin/mailman/listinfo/meta-arago

Reply via email to