1
0
forked from pool/strongswan
strongswan/strongswan-fips-disablegcrypt.patch
Tomáš Chvátal 3645b48ec5 Accepting request 239460 from home:msmeissn:branches:network:vpn
- disable gcrypt plugin by default, so it will only use openssl
  FATE#316931
- enable fips mode 2

OBS-URL: https://build.opensuse.org/request/show/239460
OBS-URL: https://build.opensuse.org/package/show/network:vpn/strongswan?expand=0&rev=70
2014-07-10 12:59:35 +00:00

14 lines
487 B
Diff

Index: strongswan-5.1.3/conf/plugins/gcrypt.conf
===================================================================
--- strongswan-5.1.3.orig/conf/plugins/gcrypt.conf
+++ strongswan-5.1.3/conf/plugins/gcrypt.conf
@@ -2,7 +2,7 @@ gcrypt {
# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
- load = yes
+ load = no
# Use faster random numbers in gcrypt; for testing only, produces weak keys!
# quick_random = no