stroke: Reuse reqids of established CHILD_SAs when routing connections
This commit is contained in:
@@ -1,4 +1,5 @@
|
|||||||
/*
|
/*
|
||||||
|
* Copyright (C) 2013 Tobias Brunner
|
||||||
* Copyright (C) 2008 Martin Willi
|
* Copyright (C) 2008 Martin Willi
|
||||||
* Hochschule fuer Technik Rapperswil
|
* Hochschule fuer Technik Rapperswil
|
||||||
*
|
*
|
||||||
@@ -579,6 +580,47 @@ METHOD(stroke_control_t, purge_ike, void,
|
|||||||
list->destroy(list);
|
list->destroy(list);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Find an existing CHILD_SA/reqid
|
||||||
|
*/
|
||||||
|
static u_int32_t find_reqid(child_cfg_t *child_cfg)
|
||||||
|
{
|
||||||
|
enumerator_t *enumerator, *children;
|
||||||
|
child_sa_t *child_sa;
|
||||||
|
ike_sa_t *ike_sa;
|
||||||
|
char *name;
|
||||||
|
u_int32_t reqid;
|
||||||
|
|
||||||
|
reqid = charon->traps->find_reqid(charon->traps, child_cfg);
|
||||||
|
if (reqid)
|
||||||
|
{ /* already trapped */
|
||||||
|
return reqid;
|
||||||
|
}
|
||||||
|
|
||||||
|
name = child_cfg->get_name(child_cfg);
|
||||||
|
enumerator = charon->controller->create_ike_sa_enumerator(
|
||||||
|
charon->controller, TRUE);
|
||||||
|
while (enumerator->enumerate(enumerator, &ike_sa))
|
||||||
|
{
|
||||||
|
children = ike_sa->create_child_sa_enumerator(ike_sa);
|
||||||
|
while (children->enumerate(children, (void**)&child_sa))
|
||||||
|
{
|
||||||
|
if (streq(name, child_sa->get_name(child_sa)))
|
||||||
|
{
|
||||||
|
reqid = child_sa->get_reqid(child_sa);
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
children->destroy(children);
|
||||||
|
if (reqid)
|
||||||
|
{
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
enumerator->destroy(enumerator);
|
||||||
|
return reqid;
|
||||||
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* call charon to install a shunt or trap
|
* call charon to install a shunt or trap
|
||||||
*/
|
*/
|
||||||
@@ -586,6 +628,7 @@ static void charon_route(peer_cfg_t *peer_cfg, child_cfg_t *child_cfg,
|
|||||||
char *name, FILE *out)
|
char *name, FILE *out)
|
||||||
{
|
{
|
||||||
ipsec_mode_t mode;
|
ipsec_mode_t mode;
|
||||||
|
u_int32_t reqid;
|
||||||
|
|
||||||
mode = child_cfg->get_mode(child_cfg);
|
mode = child_cfg->get_mode(child_cfg);
|
||||||
if (mode == MODE_PASS || mode == MODE_DROP)
|
if (mode == MODE_PASS || mode == MODE_DROP)
|
||||||
@@ -603,7 +646,8 @@ static void charon_route(peer_cfg_t *peer_cfg, child_cfg_t *child_cfg,
|
|||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
if (charon->traps->install(charon->traps, peer_cfg, child_cfg, 0))
|
reqid = find_reqid(child_cfg);
|
||||||
|
if (charon->traps->install(charon->traps, peer_cfg, child_cfg, reqid))
|
||||||
{
|
{
|
||||||
fprintf(out, "'%s' routed\n", name);
|
fprintf(out, "'%s' routed\n", name);
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user