Martin Willi
5be75c2cb1
Added support for IPv6 source route installation
2009-11-26 10:31:00 +01:00
Martin Willi
67c3875c02
Install bypass policies after creating XFRM netlink socket, loading xfrm_user module
2009-11-09 15:07:00 +01:00
Martin Willi
4a38687ae7
Use XFRM instead of PF_KEY IKE bypass policies in netlink based kernel interface
2009-10-30 11:19:32 +01:00
Martin Willi
4b1cd5a367
Reenabled acq_expires SA timer using rekey timeout
...
While not using a SA expiration for allocating SPIs works fine,
the situation is much more problematic for kernel-created temporary
SAs from acquires. If the negotiation of such a CHILD_SA fails,
the created temporary SA can not be deleted.
2009-10-07 13:09:59 +02:00
Martin Willi
7b3814f75d
remove spaces before tabs at the beginning of lines (^( )+\t)
2009-09-04 15:02:11 +02:00
Martin Willi
b9b8a98f47
remove spaces within tabs (\t( )+\t)
2009-09-04 15:00:19 +02:00
Martin Willi
7daf5226b7
removed trailing spaces ([[:space:]]+$)
2009-09-04 13:46:09 +02:00
Tobias Brunner
e75f423753
Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static.
2009-09-01 12:54:33 +02:00
Tobias Brunner
1087b9cebb
Set the packet and byte limits in the netlink and pfkey kernel interfaces.
2009-09-01 12:53:44 +02:00
Tobias Brunner
888af96343
Adapted the kernel interfaces to the new lifetime configuration.
2009-09-01 12:53:13 +02:00
Martin Willi
6180a55852
use time_monotonic() instead of time() for statistics and time difference calculations
2009-08-31 18:00:28 +02:00
Martin Willi
de5784452b
use time_monotonic() instead of gettimeofday() for time difference calculations
2009-08-31 15:25:03 +02:00
Martin Willi
469083cc7d
disable lifetimes of allocated SPIs
...
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
2009-08-25 18:15:25 +02:00
Tobias Brunner
3901937d14
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
2009-08-14 13:30:59 +02:00
Andreas Steffen
8ddcac4c48
prepare CAMELLIA_CCM ESP encryption
2009-08-10 16:30:42 +02:00
Andreas Steffen
2ad51539f6
display transmitted bytes per SA
2009-07-30 21:33:19 +02:00
Andreas Steffen
c5ebd00517
put variable definitions up front
2009-07-12 00:05:42 +02:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Tobias Brunner
d24a74c5b4
merging changes from portability branch back to trunk
...
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi
18eef5d6b6
added support for AES counter mode in ESP
...
proposal keywords: aes128ctr aes192ctr aes256ctr
2009-04-27 12:16:52 +00:00
Andreas Steffen
247e665a44
support of the ESP CAMELLIA-CBC cipher by charon
2009-04-17 09:15:15 +00:00
Andreas Steffen
37fbc74121
hiding XFRM message names from netlink
2009-01-09 09:37:13 +00:00
Andreas Steffen
88db1fa3b4
refactored DBG3 output of sent XFRM messages
2009-01-09 08:46:31 +00:00
Andreas Steffen
abc177e035
DBG3 output of sent XFRM messages
2009-01-09 08:27:17 +00:00
Tobias Brunner
0dbd9788e5
initial size of 1 is nonsense
2008-12-10 13:45:05 +00:00
Martin Willi
19e0010f51
hashtable enumerator enumerates over both, key and values
2008-12-05 10:01:52 +00:00
Tobias Brunner
3fb404d8da
implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list.
2008-12-04 16:46:08 +00:00
Martin Willi
70691c31b2
fixed double free of host in selector2ts
2008-12-03 09:15:29 +00:00
Martin Willi
addfea95df
moved the IPV6_IPSEC_POLICY definition to the ipsec plugins, fixes uClibc build
2008-11-24 08:22:05 +00:00
Andreas Steffen
7a915d627d
completed migration of MIPv6 connections
2008-11-16 21:19:58 +00:00
Martin Willi
21bf86f740
using aligned buffers for netlink
2008-11-14 14:23:11 +00:00
Martin Willi
fd2ebf0cf9
fixed encap enabling in xfrm (using new encap state, not the old one)
2008-11-14 13:12:07 +00:00
Martin Willi
a65e1c5c3a
rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead!
2008-11-14 10:30:26 +00:00
Martin Willi
f5812086f8
do not use public interface for functions which are local anyway
2008-11-14 09:38:49 +00:00
Martin Willi
dbb24102d4
fixed compiler warning
2008-11-11 10:29:31 +00:00
Tobias Brunner
e7c27b4f3f
fixing a memory leak
2008-11-11 09:56:47 +00:00
Tobias Brunner
ea625fabf9
merging kernel_klips plugin back into trunk
2008-11-11 09:22:00 +00:00
Andreas Steffen
2c81539395
added retrieval of remote kmaddress via PF_KEY
2008-11-07 03:23:59 +00:00
Martin Willi
3ac5a0db8c
replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant
2008-11-05 11:29:56 +00:00
Martin Willi
e13389a7f7
got rid of deprecated create_iterator_locked()
2008-11-05 08:32:38 +00:00
Martin Willi
31537fd970
do not install route if interface lookup failed
2008-11-05 07:38:55 +00:00
Andreas Steffen
ec1bddc50c
corrected a copy-and-paste error
2008-11-03 23:46:42 +00:00
Andreas Steffen
c636285878
updated copyright of kernel interface code
2008-11-03 23:34:23 +00:00
Andreas Steffen
bab075b166
added support for xfrm remote kmaddress
2008-11-03 23:29:34 +00:00
Andreas Steffen
ef6d339c09
migrate_job() finds a matching child_cfg
2008-11-03 02:05:41 +00:00
Andreas Steffen
5145ae48be
fully implemented the parsing of XFRM and PF_KEY MIGRATE messages
2008-11-02 21:34:52 +00:00
Andreas Steffen
b74bc4384c
identify attributes of XFRM ACQUIRE and MIGRATE messages
2008-10-31 06:18:48 +00:00
Andreas Steffen
e7f4fc537f
subscribing XFRM socket for MIGRATE messages
2008-10-31 02:50:01 +00:00
Andreas Steffen
e526d22818
parse xfrm and pf_key acquire messages and subscribe to migrate messages
2008-10-31 01:43:23 +00:00
Martin Willi
e517b4b174
passing chunks, not prf+, to kernel interface
...
gives us better control of keymat in CHILD_SA
2008-10-14 15:17:44 +00:00
Martin Willi