Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update wolfSSL plugin for strongSwan to resolve build conflicts #1332

Conversation

tim-weller-wolfssl
Copy link
Contributor

Description

This PR updates the strongSwan (libstrongswan) wolfSSL plugin to resolve build conflicts with the latest wolfSSL code-base to support the strongSwan + wolfSSL + FIPS use case.

Testing

Testing used the libstrongswan test, following the process found on the strongSwan + wolfSSL + FIPS page, with the test passing at expected levels: all tests pass except the RSA 1536-bit key-size, which is not supported by the wolfCrypt FIPS module used.

@tim-weller-wolfssl tim-weller-wolfssl force-pushed the wolfssl-strongswan-update branch 2 times, most recently from d1cf326 to 005fd9d Compare October 24, 2022 14:10
@tim-weller-wolfssl tim-weller-wolfssl force-pushed the wolfssl-strongswan-update branch 2 times, most recently from 5e83b77 to fd99ba3 Compare October 29, 2022 14:41
Copy link
Member

@tobiasbrunner tobiasbrunner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the updates. I've added some comments.

src/libstrongswan/plugins/wolfssl/wolfssl_common.h Outdated Show resolved Hide resolved
src/libstrongswan/plugins/wolfssl/wolfssl_common.h Outdated Show resolved Hide resolved
src/libstrongswan/plugins/wolfssl/wolfssl_common.h Outdated Show resolved Hide resolved
@tobiasbrunner
Copy link
Member

I've pushed this (with the move of the include) to the 1332-wolfss-build branch. Please let me know if that works for you.

@tim-weller-wolfssl
Copy link
Contributor Author

I ran the strongSwan + wolfSSL tests used to develop the changes in this branch with the changes pushed to the 1332-wolfssl-build branch and all the test configurations passed, so the changes in the 1332-wolfssl-build branch work for me. Thank-you for pushing the changes forward!

@tobiasbrunner
Copy link
Member

Great, thanks for testing. I've pushed the change to master.

@tobiasbrunner tobiasbrunner added this to the 5.9.9 milestone Dec 14, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants