Martin Willi
67c3875c02
Install bypass policies after creating XFRM netlink socket, loading xfrm_user module
2009-11-09 15:07:00 +01:00
Martin Willi
4a38687ae7
Use XFRM instead of PF_KEY IKE bypass policies in netlink based kernel interface
2009-10-30 11:19:32 +01:00
Martin Willi
4b1cd5a367
Reenabled acq_expires SA timer using rekey timeout
...
While not using a SA expiration for allocating SPIs works fine,
the situation is much more problematic for kernel-created temporary
SAs from acquires. If the negotiation of such a CHILD_SA fails,
the created temporary SA can not be deleted.
2009-10-07 13:09:59 +02:00
Martin Willi
0406ed7a16
Fixed a crash in source address lookup
2009-09-23 11:18:30 +02:00
Martin Willi
4a03e85b37
Fixed nexthop lookup, used by source route installation
2009-09-16 13:55:32 +02:00
Martin Willi
36b7ba5ee3
Use continue to advance to next iteration
2009-09-16 13:32:47 +02:00
Martin Willi
b7b5653386
Use macros to define --with options
2009-09-07 15:00:45 +02:00
Martin Willi
7b3814f75d
remove spaces before tabs at the beginning of lines (^( )+\t)
2009-09-04 15:02:11 +02:00
Martin Willi
b9b8a98f47
remove spaces within tabs (\t( )+\t)
2009-09-04 15:00:19 +02:00
Martin Willi
323f9f990f
replaces four spaces by tabs, where appropriate
2009-09-04 14:50:23 +02:00
Martin Willi
7daf5226b7
removed trailing spaces ([[:space:]]+$)
2009-09-04 13:46:09 +02:00
Martin Willi
d176994235
Use recursive source address lookup if we get a gateway only
2009-09-03 14:46:39 +02:00
Tobias Brunner
e75f423753
Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static.
2009-09-01 12:54:33 +02:00
Tobias Brunner
1087b9cebb
Set the packet and byte limits in the netlink and pfkey kernel interfaces.
2009-09-01 12:53:44 +02:00
Tobias Brunner
888af96343
Adapted the kernel interfaces to the new lifetime configuration.
2009-09-01 12:53:13 +02:00
Martin Willi
6180a55852
use time_monotonic() instead of time() for statistics and time difference calculations
2009-08-31 18:00:28 +02:00
Martin Willi
de5784452b
use time_monotonic() instead of gettimeofday() for time difference calculations
2009-08-31 15:25:03 +02:00
Martin Willi
469083cc7d
disable lifetimes of allocated SPIs
...
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
2009-08-25 18:15:25 +02:00
Tobias Brunner
3901937d14
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
2009-08-14 13:30:59 +02:00
Andreas Steffen
8ddcac4c48
prepare CAMELLIA_CCM ESP encryption
2009-08-10 16:30:42 +02:00
Andreas Steffen
2ad51539f6
display transmitted bytes per SA
2009-07-30 21:33:19 +02:00
Andreas Steffen
c5ebd00517
put variable definitions up front
2009-07-12 00:05:42 +02:00
Martin Willi
00fcc0f8f3
added -avoid-version to LDFLAGS, plugins are not versioned
2009-07-03 08:57:11 +02:00
Martin Willi
9474a0d90c
added a charon.install_virtual_ip option to disable IP installation for testing
2009-06-02 13:45:29 +02:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Tobias Brunner
d24a74c5b4
merging changes from portability branch back to trunk
...
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi
18eef5d6b6
added support for AES counter mode in ESP
...
proposal keywords: aes128ctr aes192ctr aes256ctr
2009-04-27 12:16:52 +00:00
Martin Willi
6554b5e412
schedule_job uses seconds to support time values larger than 49 days
...
added schedule_job_ms for ms resolution events
2009-04-21 15:16:56 +00:00
Andreas Steffen
247e665a44
support of the ESP CAMELLIA-CBC cipher by charon
2009-04-17 09:15:15 +00:00
Martin Willi
1490ff4d9b
updated Doxyfile
...
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Andreas Steffen
37fbc74121
hiding XFRM message names from netlink
2009-01-09 09:37:13 +00:00
Andreas Steffen
40d9388037
renamed chunk
2009-01-09 08:51:41 +00:00
Andreas Steffen
88db1fa3b4
refactored DBG3 output of sent XFRM messages
2009-01-09 08:46:31 +00:00
Andreas Steffen
abc177e035
DBG3 output of sent XFRM messages
2009-01-09 08:27:17 +00:00
Tobias Brunner
0dbd9788e5
initial size of 1 is nonsense
2008-12-10 13:45:05 +00:00
Martin Willi
19e0010f51
hashtable enumerator enumerates over both, key and values
2008-12-05 10:01:52 +00:00
Tobias Brunner
3fb404d8da
implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list.
2008-12-04 16:46:08 +00:00
Martin Willi
70691c31b2
fixed double free of host in selector2ts
2008-12-03 09:15:29 +00:00
Martin Willi
addfea95df
moved the IPV6_IPSEC_POLICY definition to the ipsec plugins, fixes uClibc build
2008-11-24 08:22:05 +00:00
Martin Willi
32f59c56f1
consider interfaces we do not monitor as up (e.g. lo)
...
fixes load-testing against 127.0.0.1
2008-11-18 09:52:28 +00:00
Andreas Steffen
7a915d627d
completed migration of MIPv6 connections
2008-11-16 21:19:58 +00:00
Martin Willi
21bf86f740
using aligned buffers for netlink
2008-11-14 14:23:11 +00:00
Martin Willi
fd2ebf0cf9
fixed encap enabling in xfrm (using new encap state, not the old one)
2008-11-14 13:12:07 +00:00
Martin Willi
fb6c8591a3
do not use a route if outgoing interface is down
...
other cleanups
2008-11-14 13:04:22 +00:00
Martin Willi
a65e1c5c3a
rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead!
2008-11-14 10:30:26 +00:00
Martin Willi
f5812086f8
do not use public interface for functions which are local anyway
2008-11-14 09:38:49 +00:00
Martin Willi
dbb24102d4
fixed compiler warning
2008-11-11 10:29:31 +00:00
Tobias Brunner
e7c27b4f3f
fixing a memory leak
2008-11-11 09:56:47 +00:00
Tobias Brunner
ea625fabf9
merging kernel_klips plugin back into trunk
2008-11-11 09:22:00 +00:00
Andreas Steffen
2c81539395
added retrieval of remote kmaddress via PF_KEY
2008-11-07 03:23:59 +00:00
Martin Willi