Project

General

Profile

Build IMC/IMV Dynamic Libraries Only

./configure --prefix=<installdir> --sysconfdir=<confdir> \
            --disable-pluto --disable-charon --disable-tools --disable-stroke --disable-updown \
            --disable-aes --disable-des --disable-md5 --disable-sha1 --disable-sha2 --disable-gmp \
            --disable-xcbc --disable-fips-prf --disable-resolve --disable-pgp --disable-dnskey \
            --enable-openssl --enable-sqlite  --with-tss=trousers \
            --enable-imc-attestation --enable-imv-attestation \
            --enable-imc-os --enable-imv-os \
            --enable-imc-scanner --enable-imv-scanner \
            --enable-imc-swid --enable-imv-swid \
            --enable-imc-test --enable-imv-test
  • The sqlite plugin (--enable-sqlite) is only needed for building the Attestation IMV (--enable-imv-attestation) which must be able to connect to an attestation database.
  • The openssl plugin (--enable-openssl) is needed for Elliptic Curve Cryptography (ECC) support. Because all the crypto primitives and the big number functionality of the OpenSSL library are readily available via the openssl plugin, the aes, des, md5, sha1 sha2 and the gmp plugins can be disabled.
  • The IMC/IMV dynamic libraries will be installed into the <installdir>/lib/ipsec/imcvs/ directory.
  • The auxiliary dynamic libraries libstrongswan, libimcv and will be installed in the <installdir>/lib/ipsec/ directory.
  • The enabled libstrongswan plugins will be installed in the <installdir>/lib/ipsec/plugins/ directory.
  • The attest database command line tool, built together with the Attestation IMV will be installed in the <installdir>/libexec/ipsec/ directory.
  • The strongswan.conf configuration file will be installed in the <confdir>/ directory.