Added an option that allows to force IKEv1 fragmentation
This commit is contained in:
@@ -92,7 +92,7 @@ struct private_ike_cfg_t {
|
||||
/**
|
||||
* use IKEv1 fragmentation
|
||||
*/
|
||||
bool fragmentation;
|
||||
fragmentation_t fragmentation;
|
||||
|
||||
/**
|
||||
* List of proposals to use
|
||||
@@ -118,7 +118,7 @@ METHOD(ike_cfg_t, force_encap_, bool,
|
||||
return this->force_encap;
|
||||
}
|
||||
|
||||
METHOD(ike_cfg_t, fragmentation, bool,
|
||||
METHOD(ike_cfg_t, fragmentation, fragmentation_t,
|
||||
private_ike_cfg_t *this)
|
||||
{
|
||||
return this->fragmentation;
|
||||
@@ -312,7 +312,7 @@ METHOD(ike_cfg_t, destroy, void,
|
||||
ike_cfg_t *ike_cfg_create(ike_version_t version, bool certreq, bool force_encap,
|
||||
char *me, bool my_allow_any, u_int16_t my_port,
|
||||
char *other, bool other_allow_any, u_int16_t other_port,
|
||||
bool fragmentation)
|
||||
fragmentation_t fragmentation)
|
||||
{
|
||||
private_ike_cfg_t *this;
|
||||
|
||||
|
||||
@@ -1,4 +1,5 @@
|
||||
/*
|
||||
* Copyright (C) 2012 Tobias Brunner
|
||||
* Copyright (C) 2005-2007 Martin Willi
|
||||
* Copyright (C) 2005 Jan Hutter
|
||||
* Hochschule fuer Technik Rapperswil
|
||||
@@ -23,6 +24,7 @@
|
||||
#define IKE_CFG_H_
|
||||
|
||||
typedef enum ike_version_t ike_version_t;
|
||||
typedef enum fragmentation_t fragmentation_t;
|
||||
typedef struct ike_cfg_t ike_cfg_t;
|
||||
|
||||
#include <library.h>
|
||||
@@ -44,6 +46,18 @@ enum ike_version_t {
|
||||
IKEV2 = 2,
|
||||
};
|
||||
|
||||
/**
|
||||
* Proprietary IKEv1 fragmentation
|
||||
*/
|
||||
enum fragmentation_t {
|
||||
/** disable fragmentation */
|
||||
FRAGMENTATION_NO,
|
||||
/** enable fragmentation if supported by peer */
|
||||
FRAGMENTATION_YES,
|
||||
/** force use of fragmentation (even for the first message) */
|
||||
FRAGMENTATION_FORCE,
|
||||
};
|
||||
|
||||
/**
|
||||
* enum strings fro ike_version_t
|
||||
*/
|
||||
@@ -143,7 +157,7 @@ struct ike_cfg_t {
|
||||
*
|
||||
* @return TRUE to use fragmentation
|
||||
*/
|
||||
bool (*fragmentation) (ike_cfg_t *this);
|
||||
fragmentation_t (*fragmentation) (ike_cfg_t *this);
|
||||
|
||||
/**
|
||||
* Get the DH group to use for IKE_SA setup.
|
||||
@@ -196,6 +210,6 @@ struct ike_cfg_t {
|
||||
ike_cfg_t *ike_cfg_create(ike_version_t version, bool certreq, bool force_encap,
|
||||
char *me, bool my_allow_any, u_int16_t my_port,
|
||||
char *other, bool other_allow_any, u_int16_t other_port,
|
||||
bool fragmentation);
|
||||
fragmentation_t fragmentation);
|
||||
|
||||
#endif /** IKE_CFG_H_ @}*/
|
||||
|
||||
Reference in New Issue
Block a user