 Tobias Brunner
|
2e1a19136d
|
IPsec policies can be looked up based on an IP packet
|
2012-08-08 15:41:03 +02:00 |
|
|
Tobias Brunner
|
2dd47c2442
|
ip_packet_t parses the header of IP packets
|
2012-08-08 15:41:03 +02:00 |
|
|
Tobias Brunner
|
ed1f0c234f
|
Order IPsec policies by a pseudo-priority based on the traffic selectors
This allows a simple lookup, i.e. just use the first policy that matches
a given IP packet.
|
2012-08-08 15:41:03 +02:00 |
|
|
Tobias Brunner
|
f1b4238311
|
Implemented a checkout/checkin mechanism for IPsec SAs
SAs can only be checked out by a single thread and all other threads
block until the SA is checked in again.
|
2012-08-08 15:41:03 +02:00 |
|
|
Tobias Brunner
|
7000cf11b1
|
IPsec policy manager added
This version only provides the very simplest management functions.
|
2012-08-08 15:41:03 +02:00 |
|
|
Tobias Brunner
|
3b8276b405
|
Method added to easily compare IPsec policies
|
2012-08-08 15:41:03 +02:00 |
|
|
Tobias Brunner
|
9a11bc09bd
|
Class representing an IPsec policy added
|
2012-08-08 15:41:03 +02:00 |
|
|
Tobias Brunner
|
e6cfd527df
|
Schedule and relay expiration events for created IPsec SAs
|
2012-08-08 15:41:03 +02:00 |
|
|
Tobias Brunner
|
b50f56f326
|
Added class to relay IPsec events (like expiration) to listeners
Currently, only expiration of IPsec SAs is supported. Later other events
for e.g. acquires or changed NAT endpoints could be added.
|
2012-08-08 15:41:03 +02:00 |
|
|
Tobias Brunner
|
914479370e
|
Added IPsec SA manager
|
2012-08-08 15:41:03 +02:00 |
|
|
Tobias Brunner
|
9f7e1899a9
|
Add methods to easily compare IPsec SAs
|
2012-08-08 15:41:02 +02:00 |
|
|
Tobias Brunner
|
f9b0c05475
|
Class representing an IPsec SA added
The IPsec SA also manages the respective ESP context.
|
2012-08-08 15:41:02 +02:00 |
|
|
Tobias Brunner
|
156f7e9b85
|
Moved types used by kernel_ipsec_t interface (and libipsec) to libstrongswan
This avoids a dependency of libipsec to libhydra.
|
2012-08-08 15:41:02 +02:00 |
|
|
Tobias Brunner
|
05a2a7950c
|
esp_packet_t implements packet_t interface
This should allow to avoid unnecessary cloning of packet data.
|
2012-08-08 15:41:02 +02:00 |
|
|
Tobias Brunner
|
3320b87a62
|
Headers from libhydra (kernel interface related) are required in libipsec
|
2012-08-08 15:41:02 +02:00 |
|
|
Tobias Brunner
|
47eb8943b2
|
ESP packet wrapper added, handles encryption/decryption/verification etc.
|
2012-08-08 15:41:02 +02:00 |
|
|
Tobias Brunner
|
64004973e3
|
Adding class to manage ESP context (crypto, sequence numbers)
|
2012-08-08 15:41:02 +02:00 |
|
|
Tobias Brunner
|
b70139fbfd
|
Stub library for user space IPsec implementation added.
|
2012-08-08 15:09:31 +02:00 |
|