 Andreas Steffen
|
37fbc74121
|
hiding XFRM message names from netlink
|
2009-01-09 09:37:13 +00:00 |
|
|
Andreas Steffen
|
40d9388037
|
renamed chunk
|
2009-01-09 08:51:41 +00:00 |
|
|
Andreas Steffen
|
88db1fa3b4
|
refactored DBG3 output of sent XFRM messages
|
2009-01-09 08:46:31 +00:00 |
|
|
Andreas Steffen
|
abc177e035
|
DBG3 output of sent XFRM messages
|
2009-01-09 08:27:17 +00:00 |
|
|
Tobias Brunner
|
0dbd9788e5
|
initial size of 1 is nonsense
|
2008-12-10 13:45:05 +00:00 |
|
|
Martin Willi
|
19e0010f51
|
hashtable enumerator enumerates over both, key and values
|
2008-12-05 10:01:52 +00:00 |
|
|
Tobias Brunner
|
3fb404d8da
|
implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list.
|
2008-12-04 16:46:08 +00:00 |
|
|
Martin Willi
|
70691c31b2
|
fixed double free of host in selector2ts
|
2008-12-03 09:15:29 +00:00 |
|
|
Martin Willi
|
addfea95df
|
moved the IPV6_IPSEC_POLICY definition to the ipsec plugins, fixes uClibc build
|
2008-11-24 08:22:05 +00:00 |
|
|
Martin Willi
|
32f59c56f1
|
consider interfaces we do not monitor as up (e.g. lo)
fixes load-testing against 127.0.0.1
|
2008-11-18 09:52:28 +00:00 |
|
|
Andreas Steffen
|
7a915d627d
|
completed migration of MIPv6 connections
|
2008-11-16 21:19:58 +00:00 |
|
|
Martin Willi
|
21bf86f740
|
using aligned buffers for netlink
|
2008-11-14 14:23:11 +00:00 |
|
|
Martin Willi
|
fd2ebf0cf9
|
fixed encap enabling in xfrm (using new encap state, not the old one)
|
2008-11-14 13:12:07 +00:00 |
|
|
Martin Willi
|
fb6c8591a3
|
do not use a route if outgoing interface is down
other cleanups
|
2008-11-14 13:04:22 +00:00 |
|
|
Martin Willi
|
a65e1c5c3a
|
rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead!
|
2008-11-14 10:30:26 +00:00 |
|
|
Martin Willi
|
f5812086f8
|
do not use public interface for functions which are local anyway
|
2008-11-14 09:38:49 +00:00 |
|
|
Martin Willi
|
dbb24102d4
|
fixed compiler warning
|
2008-11-11 10:29:31 +00:00 |
|
|
Tobias Brunner
|
e7c27b4f3f
|
fixing a memory leak
|
2008-11-11 09:56:47 +00:00 |
|
|
Tobias Brunner
|
ea625fabf9
|
merging kernel_klips plugin back into trunk
|
2008-11-11 09:22:00 +00:00 |
|
|
Andreas Steffen
|
2c81539395
|
added retrieval of remote kmaddress via PF_KEY
|
2008-11-07 03:23:59 +00:00 |
|
|
Martin Willi
|
3ac5a0db8c
|
replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant
|
2008-11-05 11:29:56 +00:00 |
|
|
Martin Willi
|
e13389a7f7
|
got rid of deprecated create_iterator_locked()
|
2008-11-05 08:32:38 +00:00 |
|
|
Martin Willi
|
31537fd970
|
do not install route if interface lookup failed
|
2008-11-05 07:38:55 +00:00 |
|
|
Andreas Steffen
|
ec1bddc50c
|
corrected a copy-and-paste error
|
2008-11-03 23:46:42 +00:00 |
|
|
Andreas Steffen
|
c636285878
|
updated copyright of kernel interface code
|
2008-11-03 23:34:23 +00:00 |
|
|
Andreas Steffen
|
bab075b166
|
added support for xfrm remote kmaddress
|
2008-11-03 23:29:34 +00:00 |
|
|
Andreas Steffen
|
ef6d339c09
|
migrate_job() finds a matching child_cfg
|
2008-11-03 02:05:41 +00:00 |
|
|
Andreas Steffen
|
5145ae48be
|
fully implemented the parsing of XFRM and PF_KEY MIGRATE messages
|
2008-11-02 21:34:52 +00:00 |
|
|
Andreas Steffen
|
b74bc4384c
|
identify attributes of XFRM ACQUIRE and MIGRATE messages
|
2008-10-31 06:18:48 +00:00 |
|
|
Andreas Steffen
|
e7f4fc537f
|
subscribing XFRM socket for MIGRATE messages
|
2008-10-31 02:50:01 +00:00 |
|
|
Andreas Steffen
|
e526d22818
|
parse xfrm and pf_key acquire messages and subscribe to migrate messages
|
2008-10-31 01:43:23 +00:00 |
|
|
Martin Willi
|
e517b4b174
|
passing chunks, not prf+, to kernel interface
gives us better control of keymat in CHILD_SA
|
2008-10-14 15:17:44 +00:00 |
|
|
Tobias Brunner
|
1adaa02bb2
|
merging kernel_pfkey plugin back from kernel-interface branch
|
2008-10-14 08:46:31 +00:00 |
|
|
Andreas Steffen
|
03d5f41137
|
faster implementation of addr_in_subnet()
|
2008-10-09 05:44:00 +00:00 |
|
|
Martin Willi
|
85be7e5b75
|
ignore routing events for our own routes
|
2008-10-08 08:29:49 +00:00 |
|
|
Martin Willi
|
ce5b17082d
|
mobike: try to keep existing source address before switching to another
|
2008-10-08 08:23:46 +00:00 |
|
|
Andreas Steffen
|
51358f9f72
|
correct fix that replaces Changeset 4378
|
2008-10-08 06:57:52 +00:00 |
|
|
Andreas Steffen
|
c85862931f
|
removing fix applied by Changeset 4378
|
2008-10-08 06:15:41 +00:00 |
|
|
Andreas Steffen
|
7a07cd1c75
|
fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang Steudel, TU Ilmenau
|
2008-10-07 21:41:45 +00:00 |
|
|
Martin Willi
|
aa9a300677
|
userland support to process notifies for new NAT mappings detected in UDP encapsulation
|
2008-10-07 07:55:28 +00:00 |
|
|
Tobias Brunner
|
a341a68fac
|
merging renaming of mode_t to ipsec_mode_t back to trunk
|
2008-09-25 13:56:23 +00:00 |
|
|
Tobias Brunner
|
507f26f685
|
merging modularized kernel interface back to trunk
|
2008-09-25 07:56:58 +00:00 |
|