Martin Willi
2621ff4d40
Currently we use the very versatile linked-list collection to store elements with variable count. This is fine, but very inefficient: Due to the many methods in the linked list, on 64-bit platforms an empty list alone is more than 200 bytes. As we currently have about 50 lists per IKE_SA/CHILD_SA pair, this takes up to 10KB just for managing the empty lists. This is about the half of memory used by an IKE_SA/CHILD_SA pair, and obviously way too much. The new array type is not an object, but a collection of functions on an abstract type. The following lists are per IKE_SA and should be considered for a replacement with more efficient arrays (this uses load-testers on-demand created dynamic configurations, other scenarios have different lists): 14 -> ike_sa_create() @ src/libcharon/sa/ike_sa.c:2198 10 -> auth_cfg_create() @ src/libstrongswan/credentials/auth_cfg.c:1088 6 -> task_manager_v2_create() @ src/libcharon/sa/ikev2/task_manager_v2.c:1505 6 -> proposal_create() @ src/libcharon/config/proposal.c:592 5 -> peer_cfg_create() @ src/libcharon/config/peer_cfg.c:657 4 -> child_sa_create() @ src/libcharon/sa/child_sa.c:1090 2 -> child_cfg_create() @ src/libcharon/config/child_cfg.c:536 1 -> ike_cfg_create() @ src/libcharon/config/ike_cfg.c:330 1 -> put_connected_peers() @ src/libcharon/sa/ike_sa_manager.c:854
114 lines
3.8 KiB
Makefile
114 lines
3.8 KiB
Makefile
LOCAL_PATH := $(call my-dir)
|
|
include $(CLEAR_VARS)
|
|
|
|
# copy-n-paste from Makefile.am
|
|
LOCAL_SRC_FILES := \
|
|
library.c \
|
|
asn1/asn1.c asn1/asn1_parser.c asn1/oid.c bio/bio_reader.c bio/bio_writer.c \
|
|
collections/blocking_queue.c collections/enumerator.c collections/hashtable.c \
|
|
collections/array.c \
|
|
collections/linked_list.c crypto/crypters/crypter.c crypto/hashers/hasher.c \
|
|
crypto/proposal/proposal_keywords.c crypto/proposal/proposal_keywords_static.c \
|
|
crypto/prfs/prf.c crypto/prfs/mac_prf.c crypto/pkcs5.c \
|
|
crypto/rngs/rng.c crypto/prf_plus.c crypto/signers/signer.c \
|
|
crypto/signers/mac_signer.c crypto/crypto_factory.c crypto/crypto_tester.c \
|
|
crypto/diffie_hellman.c crypto/aead.c crypto/transform.c \
|
|
credentials/credential_factory.c credentials/builder.c \
|
|
credentials/cred_encoding.c credentials/keys/private_key.c \
|
|
credentials/keys/public_key.c credentials/keys/shared_key.c \
|
|
credentials/certificates/certificate.c credentials/certificates/crl.c \
|
|
credentials/certificates/ocsp_response.c \
|
|
credentials/containers/container.c credentials/containers/pkcs12.c \
|
|
credentials/ietf_attributes/ietf_attributes.c credentials/credential_manager.c \
|
|
credentials/sets/auth_cfg_wrapper.c credentials/sets/ocsp_response_wrapper.c \
|
|
credentials/sets/cert_cache.c credentials/sets/mem_cred.c \
|
|
credentials/sets/callback_cred.c credentials/auth_cfg.c database/database.c \
|
|
database/database_factory.c fetcher/fetcher.c fetcher/fetcher_manager.c eap/eap.c \
|
|
ipsec/ipsec_types.c \
|
|
networking/host.c networking/host_resolver.c networking/packet.c \
|
|
networking/tun_device.c \
|
|
pen/pen.c plugins/plugin_loader.c plugins/plugin_feature.c processing/jobs/job.c \
|
|
processing/jobs/callback_job.c processing/processor.c processing/scheduler.c \
|
|
resolver/resolver_manager.c resolver/rr_set.c \
|
|
selectors/traffic_selector.c threading/thread.c threading/thread_value.c \
|
|
threading/mutex.c threading/semaphore.c threading/rwlock.c threading/spinlock.c \
|
|
utils/utils.c utils/chunk.c utils/debug.c utils/enum.c utils/identification.c \
|
|
utils/lexparser.c utils/optionsfrom.c utils/capabilities.c utils/backtrace.c \
|
|
utils/printf_hook.c utils/settings.c
|
|
|
|
# adding the plugin source files
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, aes)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, curl)
|
|
ifneq ($(call plugin_enabled, curl),)
|
|
LOCAL_C_INCLUDES += $(libcurl_PATH)
|
|
LOCAL_SHARED_LIBRARIES += libcurl
|
|
endif
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, des)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, fips-prf)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, gmp)
|
|
ifneq ($(call plugin_enabled, gmp),)
|
|
LOCAL_C_INCLUDES += $(libgmp_PATH)
|
|
LOCAL_SHARED_LIBRARIES += libgmp
|
|
endif
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, hmac)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, md4)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, md5)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, nonce)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, openssl)
|
|
ifneq ($(call plugin_enabled, openssl),)
|
|
LOCAL_C_INCLUDES += $(openssl_PATH)
|
|
LOCAL_SHARED_LIBRARIES += libcrypto
|
|
endif
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, pem)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, pkcs1)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, pkcs7)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, pkcs8)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, pkcs11)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, pubkey)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, random)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, sha1)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, sha2)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, x509)
|
|
|
|
LOCAL_SRC_FILES += $(call add_plugin, xcbc)
|
|
|
|
# build libstrongswan ----------------------------------------------------------
|
|
|
|
LOCAL_C_INCLUDES += \
|
|
$(libvstr_PATH)
|
|
|
|
LOCAL_CFLAGS := $(strongswan_CFLAGS) \
|
|
-include $(LOCAL_PATH)/AndroidConfigLocal.h
|
|
|
|
LOCAL_MODULE := libstrongswan
|
|
|
|
LOCAL_MODULE_TAGS := optional
|
|
|
|
LOCAL_ARM_MODE := arm
|
|
|
|
LOCAL_PRELINK_MODULE := false
|
|
|
|
LOCAL_SHARED_LIBRARIES += libdl libvstr
|
|
|
|
include $(BUILD_SHARED_LIBRARY)
|