aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2016-06-20 18:18:46 +0200
committerTobias Brunner <tobias@strongswan.org>2016-06-20 18:23:45 +0200
commitdee01d019ba9743b2784b417155601d10c173a66 (patch)
tree87727aec810e8c017f698415af9340a77301ffaa
parent95a5806a8fb493c0e32608721f6bcda9846b651a (diff)
downloadstrongswan-dee01d019ba9743b2784b417155601d10c173a66.tar.bz2
strongswan-dee01d019ba9743b2784b417155601d10c173a66.tar.xz
testing: Only load selected plugins in swanctl
The main issue is that the ldap and curl plugins, or rather the libraries they use, initialize GnuTLS (curl, strangely, even when it is, by its own account, linked against OpenSSL). Some of these allocations are only freed once the libraries are unloaded. This means that the leak detective causes invalid frees when swanctl is terminated and libraries are unloaded after the leak detective is already deinitialized.
-rw-r--r--testing/hosts/default/etc/strongswan.conf.testing4
1 files changed, 4 insertions, 0 deletions
diff --git a/testing/hosts/default/etc/strongswan.conf.testing b/testing/hosts/default/etc/strongswan.conf.testing
index 55efbe7d1..3fc113b77 100644
--- a/testing/hosts/default/etc/strongswan.conf.testing
+++ b/testing/hosts/default/etc/strongswan.conf.testing
@@ -1,3 +1,7 @@
+swanctl {
+ load = x509 acert pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl
+}
+
charon {
retransmit_tries = 2
retransmit_timeout = 1.0