You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

497 lines
15 KiB

  1. #
  2. # Copyright (C) 2012-2015 OpenWrt.org
  3. #
  4. # This is free software, licensed under the GNU General Public License v2.
  5. # See /LICENSE for more information.
  6. #
  7. include $(TOPDIR)/rules.mk
  8. PKG_NAME:=strongswan
  9. PKG_VERSION:=5.3.2
  10. PKG_RELEASE:=1
  11. PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  12. PKG_SOURCE_URL:=http://download.strongswan.org/ http://download2.strongswan.org/
  13. PKG_MD5SUM:=fab014be1477ef4ebf9a765e10f8802c
  14. PKG_LICENSE:=GPL-2.0+
  15. PKG_MAINTAINER:=Steven Barth <cyrus@openwrt.org>
  16. PKG_MOD_AVAILABLE:= \
  17. addrblock \
  18. aes \
  19. af-alg \
  20. agent \
  21. attr \
  22. attr-sql \
  23. blowfish \
  24. ccm \
  25. cmac \
  26. constraints \
  27. coupling \
  28. ctr \
  29. curl \
  30. des \
  31. dhcp \
  32. dnskey \
  33. duplicheck \
  34. eap-identity \
  35. eap-md5 \
  36. eap-mschapv2 \
  37. eap-radius \
  38. eap-tls \
  39. farp \
  40. fips-prf \
  41. gcm \
  42. gcrypt \
  43. gmp \
  44. ha \
  45. hmac \
  46. kernel-libipsec \
  47. kernel-netlink \
  48. ldap \
  49. led \
  50. load-tester \
  51. nonce \
  52. md4 \
  53. md5 \
  54. mysql \
  55. openssl \
  56. pem \
  57. pgp \
  58. pkcs1 \
  59. pkcs8 \
  60. pkcs11 \
  61. pubkey \
  62. random \
  63. resolve \
  64. revocation \
  65. sha1 \
  66. sha2 \
  67. smp \
  68. socket-default \
  69. socket-dynamic \
  70. sql \
  71. sqlite \
  72. stroke \
  73. test-vectors \
  74. unity \
  75. uci \
  76. updown \
  77. whitelist \
  78. x509 \
  79. xauth-eap \
  80. xauth-generic \
  81. xcbc
  82. PKG_CONFIG_DEPENDS:= \
  83. CONFIG_STRONGSWAN_ROUTING_TABLE \
  84. CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
  85. $(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE)) \
  86. PKG_FIXUP:=autoreconf
  87. PKG_INSTALL:=1
  88. PKG_BUILD_PARALLEL:=1
  89. include $(INCLUDE_DIR)/package.mk
  90. define Package/strongswan/Default
  91. SUBMENU:=VPN
  92. SECTION:=net
  93. CATEGORY:=Network
  94. TITLE:=StrongSwan
  95. URL:=http://www.strongswan.org/
  96. endef
  97. define Package/strongswan/description/Default
  98. StrongSwan is an OpenSource IPsec implementation for the Linux operating system.
  99. endef
  100. define Package/strongswan
  101. $(call Package/strongswan/Default)
  102. DEPENDS:= +libpthread +ip \
  103. +kmod-crypto-authenc \
  104. +kmod-ipsec +kmod-ipsec4 +kmod-ipsec6 \
  105. +kmod-ipt-ipsec +iptables-mod-ipsec
  106. endef
  107. define Package/strongswan/config
  108. source "$(SOURCE)/Config.in"
  109. endef
  110. define Package/strongswan/description
  111. $(call Package/strongswan/description/Default)
  112. This package contains shared libraries and scripts.
  113. endef
  114. define Package/strongswan-full
  115. $(call Package/strongswan/Default)
  116. TITLE+= (full)
  117. DEPENDS:= +strongswan \
  118. +strongswan-charon \
  119. +strongswan-mod-addrblock \
  120. +strongswan-mod-aes \
  121. +strongswan-mod-af-alg \
  122. +strongswan-mod-agent \
  123. +strongswan-mod-attr \
  124. +strongswan-mod-attr-sql \
  125. +strongswan-mod-blowfish \
  126. +strongswan-mod-ccm \
  127. +strongswan-mod-cmac \
  128. +strongswan-mod-constraints \
  129. +strongswan-mod-coupling \
  130. +strongswan-mod-ctr \
  131. +strongswan-mod-curl \
  132. +strongswan-mod-des \
  133. +strongswan-mod-dhcp \
  134. +strongswan-mod-dnskey \
  135. +strongswan-mod-duplicheck \
  136. +strongswan-mod-eap-identity \
  137. +strongswan-mod-eap-md5 \
  138. +strongswan-mod-eap-mschapv2 \
  139. +strongswan-mod-eap-radius \
  140. +strongswan-mod-eap-tls \
  141. +strongswan-mod-farp \
  142. +strongswan-mod-fips-prf \
  143. +strongswan-mod-gcm \
  144. +strongswan-mod-gcrypt \
  145. +strongswan-mod-gmp \
  146. +strongswan-mod-ha \
  147. +strongswan-mod-hmac \
  148. +strongswan-mod-kernel-netlink \
  149. +strongswan-mod-ldap \
  150. +strongswan-mod-led \
  151. +strongswan-mod-load-tester \
  152. +strongswan-mod-nonce \
  153. +strongswan-mod-md4 \
  154. +strongswan-mod-md5 \
  155. +strongswan-mod-mysql \
  156. +strongswan-mod-openssl \
  157. +strongswan-mod-pem \
  158. +strongswan-mod-pgp \
  159. +strongswan-mod-pkcs1 \
  160. +strongswan-mod-pkcs8 \
  161. +strongswan-mod-pkcs11 \
  162. +strongswan-mod-pubkey \
  163. +strongswan-mod-random \
  164. +strongswan-mod-resolve \
  165. +strongswan-mod-revocation \
  166. +strongswan-mod-sha1 \
  167. +strongswan-mod-sha2 \
  168. +strongswan-mod-smp \
  169. +strongswan-mod-socket-default \
  170. +strongswan-mod-sql \
  171. +strongswan-mod-sqlite \
  172. +strongswan-mod-stroke \
  173. +strongswan-mod-test-vectors \
  174. +strongswan-mod-uci \
  175. +strongswan-mod-unity \
  176. +strongswan-mod-updown \
  177. +strongswan-mod-whitelist \
  178. +strongswan-mod-x509 \
  179. +strongswan-mod-xauth-eap \
  180. +strongswan-mod-xauth-generic \
  181. +strongswan-mod-xcbc \
  182. +strongswan-utils \
  183. @DEVEL
  184. endef
  185. define Package/strongswan-full/description
  186. $(call Package/strongswan/description/Default)
  187. This meta-package contains dependencies for all of the strongswan plugins
  188. except kernel-libipsec,
  189. socket-dynamic and which are ommitted in favor of the kernel-netlink and
  190. socket-default plugins.
  191. endef
  192. define Package/strongswan-default
  193. $(call Package/strongswan/Default)
  194. TITLE+= (default)
  195. DEPENDS:= +strongswan \
  196. +strongswan-charon \
  197. +strongswan-mod-aes \
  198. +strongswan-mod-attr \
  199. +strongswan-mod-constraints \
  200. +strongswan-mod-des \
  201. +strongswan-mod-dnskey \
  202. +strongswan-mod-fips-prf \
  203. +strongswan-mod-gmp \
  204. +strongswan-mod-hmac \
  205. +strongswan-mod-kernel-netlink \
  206. +strongswan-mod-md5 \
  207. +strongswan-mod-nonce \
  208. +strongswan-mod-pem \
  209. +strongswan-mod-pgp \
  210. +strongswan-mod-pkcs1 \
  211. +strongswan-mod-pubkey \
  212. +strongswan-mod-random \
  213. +strongswan-mod-resolve \
  214. +strongswan-mod-revocation \
  215. +strongswan-mod-sha1 \
  216. +strongswan-mod-sha2 \
  217. +strongswan-mod-socket-default \
  218. +strongswan-mod-stroke \
  219. +strongswan-mod-updown \
  220. +strongswan-mod-x509 \
  221. +strongswan-mod-xauth-generic \
  222. +strongswan-mod-xcbc \
  223. +strongswan-utils
  224. endef
  225. define Package/strongswan-default/description
  226. $(call Package/strongswan/description/Default)
  227. This meta-package contains only dependencies to match upstream defaults.
  228. endef
  229. define Package/strongswan-minimal
  230. $(call Package/strongswan/Default)
  231. TITLE+= (minimal)
  232. DEPENDS:= +strongswan \
  233. +strongswan-charon \
  234. +strongswan-mod-aes \
  235. +strongswan-mod-gmp \
  236. +strongswan-mod-hmac \
  237. +strongswan-mod-kernel-netlink \
  238. +strongswan-mod-nonce \
  239. +strongswan-mod-pubkey \
  240. +strongswan-mod-random \
  241. +strongswan-mod-sha1 \
  242. +strongswan-mod-socket-default \
  243. +strongswan-mod-stroke \
  244. +strongswan-mod-updown \
  245. +strongswan-mod-x509 \
  246. +strongswan-mod-xcbc
  247. endef
  248. define Package/strongswan-minimal/description
  249. $(call Package/strongswan/description/Default)
  250. This meta-package contains only dependencies for a minimal IKEv2 setup.
  251. endef
  252. define Package/strongswan-charon
  253. $(call Package/strongswan/Default)
  254. TITLE+= IKEv1/IKEv2 keying daemon
  255. DEPENDS:= +strongswan
  256. endef
  257. define Package/strongswan-charon/description
  258. $(call Package/strongswan/description/Default)
  259. This package contains charon, an IKEv2 keying daemon.
  260. endef
  261. define Package/strongswan-utils
  262. $(call Package/strongswan/Default)
  263. TITLE+= utilities
  264. DEPENDS:= +strongswan
  265. endef
  266. define Package/strongswan-utils/description
  267. $(call Package/strongswan/description/Default)
  268. This package contains the pki & scepclient utilities.
  269. endef
  270. define BuildPlugin
  271. define Package/strongswan-mod-$(1)
  272. $$(call Package/strongswan/Default)
  273. TITLE:= StrongSwan $(2) plugin
  274. DEPENDS:= +strongswan $(3)
  275. endef
  276. define Package/strongswan-mod-$(1)/install
  277. $(INSTALL_DIR) $$(1)/etc/strongswan.d/charon
  278. if [ -f $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf ]; then \
  279. $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf $$(1)/etc/strongswan.d/charon/; fi
  280. $(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
  281. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
  282. $$(1)/usr/lib/ipsec/plugins/
  283. $(call Plugin/$(1)/install,$$(1))
  284. endef
  285. $$(eval $$(call BuildPackage,strongswan-mod-$(1)))
  286. endef
  287. CONFIGURE_ARGS+= \
  288. --disable-scripts \
  289. --disable-static \
  290. --disable-fast \
  291. --with-systemdsystemunitdir=no \
  292. $(if $(CONFIG_PACKAGE_strongswan-utils),--enable-pki --enable-scepclient,--disable-pki --disable-scepclient) \
  293. --with-random-device=/dev/random \
  294. --with-urandom-device=/dev/urandom \
  295. --with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
  296. --with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
  297. $(foreach m,$(PKG_MOD_AVAILABLE), \
  298. $(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \
  299. )
  300. EXTRA_LDFLAGS+= -Wl,-rpath-link,$(STAGING_DIR)/usr/lib
  301. define Package/strongswan/conffiles
  302. /etc/ipsec.conf
  303. /etc/ipsec.secrets
  304. /etc/ipsec.user
  305. /etc/strongswan.conf
  306. endef
  307. define Package/strongswan/install
  308. $(INSTALL_DIR) $(1)/etc
  309. $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.conf $(1)/etc/
  310. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  311. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{libtls.so.*,libstrongswan.so.*,libhydra.so.*} $(1)/usr/lib/ipsec/
  312. $(INSTALL_CONF) ./files/ipsec.secrets $(1)/etc/
  313. $(INSTALL_DIR) $(1)/etc/init.d
  314. $(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
  315. endef
  316. define Package/strongswan-default/install
  317. true
  318. endef
  319. define Package/strongswan-full/install
  320. true
  321. endef
  322. define Package/strongswan-minimal/install
  323. true
  324. endef
  325. define Package/strongswan-charon/install
  326. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  327. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/charon $(1)/usr/lib/ipsec/
  328. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libcharon.so.* $(1)/usr/lib/ipsec/
  329. endef
  330. define Package/strongswan-utils/install
  331. $(INSTALL_DIR) $(1)/usr/sbin
  332. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
  333. $(INSTALL_DIR) $(1)/usr/bin
  334. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/pki $(1)/usr/bin/
  335. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  336. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/scepclient $(1)/usr/lib/ipsec/
  337. endef
  338. define Plugin/duplicheck/install
  339. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  340. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/duplicheck $(1)/usr/lib/ipsec/
  341. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-duplicheck.so $(1)/usr/lib/ipsec/plugins/
  342. endef
  343. define Plugin/eap-radius/install
  344. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  345. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libradius.so.* $(1)/usr/lib/ipsec/
  346. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-eap-radius.so $(1)/usr/lib/ipsec/plugins/
  347. endef
  348. define Plugin/attr-sql/install
  349. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  350. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/pool $(1)/usr/lib/ipsec/
  351. endef
  352. define Plugin/stroke/install
  353. $(INSTALL_DIR) $(1)/etc/ipsec.d/aacerts
  354. $(INSTALL_DIR) $(1)/etc/ipsec.d/acerts
  355. $(INSTALL_DIR) $(1)/etc/ipsec.d/cacerts
  356. $(INSTALL_DIR) $(1)/etc/ipsec.d/certs
  357. $(INSTALL_DIR) $(1)/etc/ipsec.d/crls
  358. $(INSTALL_DIR) $(1)/etc/ipsec.d/ocspcerts
  359. $(INSTALL_DIR) $(1)/etc/ipsec.d/private
  360. $(INSTALL_DIR) $(1)/etc/ipsec.d/reqs
  361. $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/ipsec.conf $(1)/etc/
  362. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  363. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{starter,stroke} $(1)/usr/lib/ipsec/
  364. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-stroke.so $(1)/usr/lib/ipsec/plugins/
  365. endef
  366. define Plugin/updown/install
  367. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  368. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/_updown $(1)/usr/lib/ipsec/
  369. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-updown.so $(1)/usr/lib/ipsec/plugins/
  370. $(INSTALL_DIR) $(1)/etc
  371. $(INSTALL_CONF) ./files/ipsec.user $(1)/etc/
  372. endef
  373. define Plugin/whitelist/install
  374. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  375. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/whitelist $(1)/usr/lib/ipsec/
  376. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-whitelist.so $(1)/usr/lib/ipsec/plugins/
  377. endef
  378. define Plugin/kernel-libipsec/install
  379. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  380. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libipsec.so.* $(1)/usr/lib/ipsec/
  381. endef
  382. $(eval $(call BuildPackage,strongswan))
  383. $(eval $(call BuildPackage,strongswan-default))
  384. $(eval $(call BuildPackage,strongswan-full))
  385. $(eval $(call BuildPackage,strongswan-minimal))
  386. $(eval $(call BuildPackage,strongswan-charon))
  387. $(eval $(call BuildPackage,strongswan-utils))
  388. $(eval $(call BuildPlugin,addrblock,RFC 3779 address block constraint support,))
  389. $(eval $(call BuildPlugin,aes,AES crypto,))
  390. $(eval $(call BuildPlugin,af-alg,AF_ALG crypto interface to Linux Crypto API,+kmod-crypto-user))
  391. $(eval $(call BuildPlugin,agent,SSH agent signing,))
  392. $(eval $(call BuildPlugin,attr,file based config,))
  393. $(eval $(call BuildPlugin,attr-sql,SQL based config,+strongswan-charon))
  394. $(eval $(call BuildPlugin,blowfish,Blowfish crypto,))
  395. $(eval $(call BuildPlugin,ccm,CCM AEAD wrapper crypto,))
  396. $(eval $(call BuildPlugin,cmac,CMAC crypto,))
  397. $(eval $(call BuildPlugin,constraints,advanced X509 constraint checking,))
  398. $(eval $(call BuildPlugin,coupling,IKEv2 plugin to couple peer certificates permanently to authentication,))
  399. $(eval $(call BuildPlugin,ctr,Counter Mode wrapper crypto,))
  400. $(eval $(call BuildPlugin,curl,cURL fetcher plugin,+PACKAGE_strongswan-mod-curl:libcurl))
  401. $(eval $(call BuildPlugin,des,DES crypto,))
  402. $(eval $(call BuildPlugin,dhcp,DHCP based attribute provider,))
  403. $(eval $(call BuildPlugin,dnskey,DNS RR key decoding,))
  404. $(eval $(call BuildPlugin,duplicheck,advanced duplicate checking,))
  405. $(eval $(call BuildPlugin,eap-identity,EAP identity helper,))
  406. $(eval $(call BuildPlugin,eap-md5,EAP MD5 (CHAP) EAP auth,))
  407. $(eval $(call BuildPlugin,eap-mschapv2,EAP MS-CHAPv2 EAP auth,+strongswan-mod-md4 +strongswan-mod-des))
  408. $(eval $(call BuildPlugin,eap-radius,EAP RADIUS auth,))
  409. $(eval $(call BuildPlugin,eap-tls,EAP TLS auth,))
  410. $(eval $(call BuildPlugin,farp,fake arp respsonses,))
  411. $(eval $(call BuildPlugin,fips-prf,FIPS PRF crypto,+strongswan-mod-sha1))
  412. $(eval $(call BuildPlugin,gcm,GCM AEAD wrapper crypto,))
  413. $(eval $(call BuildPlugin,gcrypt,libgcrypt,+PACKAGE_strongswan-mod-gcrypt:libgcrypt))
  414. $(eval $(call BuildPlugin,gmp,libgmp,+PACKAGE_strongswan-mod-gmp:libgmp))
  415. $(eval $(call BuildPlugin,ha,high availability cluster,))
  416. $(eval $(call BuildPlugin,hmac,HMAC crypto,))
  417. $(eval $(call BuildPlugin,kernel-libipsec,libipsec kernel interface,))
  418. $(eval $(call BuildPlugin,kernel-netlink,netlink kernel interface,))
  419. $(eval $(call BuildPlugin,ldap,LDAP,+PACKAGE_strongswan-mod-ldap:libopenldap))
  420. $(eval $(call BuildPlugin,led,LED blink on IKE activity,))
  421. $(eval $(call BuildPlugin,load-tester,load testing,))
  422. $(eval $(call BuildPlugin,nonce,nonce genereation,))
  423. $(eval $(call BuildPlugin,md4,MD4 crypto,))
  424. $(eval $(call BuildPlugin,md5,MD5 crypto,))
  425. $(eval $(call BuildPlugin,mysql,MySQL database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-mysql:libmysqlclient-r))
  426. $(eval $(call BuildPlugin,openssl,OpenSSL crypto,+PACKAGE_strongswan-mod-openssl:libopenssl))
  427. $(eval $(call BuildPlugin,pem,PEM decoding,))
  428. $(eval $(call BuildPlugin,pgp,PGP key decoding,))
  429. $(eval $(call BuildPlugin,pkcs1,PKCS1 key decoding,))
  430. $(eval $(call BuildPlugin,pkcs8,PKCS8 key decoding,))
  431. $(eval $(call BuildPlugin,pkcs11,PKCS11 key decoding,))
  432. $(eval $(call BuildPlugin,pubkey,raw public key,))
  433. $(eval $(call BuildPlugin,random,RNG,))
  434. $(eval $(call BuildPlugin,resolve,DNS resolver,))
  435. $(eval $(call BuildPlugin,revocation,X509 CRL/OCSP revocation,))
  436. $(eval $(call BuildPlugin,sha1,SHA1 crypto,))
  437. $(eval $(call BuildPlugin,sha2,SHA2 crypto,))
  438. $(eval $(call BuildPlugin,smp,SMP configuration and control interface,+PACKAGE_strongswan-mod-smp:libxml2))
  439. $(eval $(call BuildPlugin,socket-default,default socket implementation for charon,))
  440. $(eval $(call BuildPlugin,socket-dynamic,dynamic socket implementation for charon,))
  441. $(eval $(call BuildPlugin,sql,SQL database interface,))
  442. $(eval $(call BuildPlugin,sqlite,SQLite database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-sqlite:libsqlite3))
  443. $(eval $(call BuildPlugin,stroke,Stroke,+strongswan-utils))
  444. $(eval $(call BuildPlugin,test-vectors,crypto test vectors,))
  445. $(eval $(call BuildPlugin,uci,UCI config interface,+PACKAGE_strongswan-mod-uci:libuci))
  446. $(eval $(call BuildPlugin,unity,Cisco Unity extension,))
  447. $(eval $(call BuildPlugin,updown,updown firewall,))
  448. $(eval $(call BuildPlugin,whitelist,peer identity whitelisting,))
  449. $(eval $(call BuildPlugin,x509,x509 certificate,))
  450. $(eval $(call BuildPlugin,xauth-eap,EAP XAuth backend,))
  451. $(eval $(call BuildPlugin,xauth-generic,generic XAuth backend,))
  452. $(eval $(call BuildPlugin,xcbc,xcbc crypto,))