Tobias Brunner
fe962bc788
testing: Added ikev1 xfrm mark scenarios.
2010-09-02 19:04:25 +02:00
Tobias Brunner
f8edbc22c7
pluto: Make marks available in updown script.
2010-09-02 19:04:25 +02:00
Tobias Brunner
190ee00c94
pluto: Fixed comparison of connections, if marks are specified.
2010-09-02 19:04:25 +02:00
Tobias Brunner
a280ba9525
pluto: Store xfrm marks on connection and use them when installing SAs and policies.
2010-09-02 19:04:25 +02:00
Tobias Brunner
a0d13f42e6
starter: Some whitespace cleanup.
2010-09-02 19:04:25 +02:00
Tobias Brunner
f23e7394ae
pluto: Added PLUTO_UDP_ENC argument to updown script.
...
This contains the remote UDP port in case of UDP encapsulated ESP.
2010-09-02 19:04:25 +02:00
Tobias Brunner
3251294ceb
pluto: Return value fixed.
2010-09-02 19:04:25 +02:00
Tobias Brunner
d499bdf393
pluto: Removed bare shunt table.
2010-09-02 19:04:24 +02:00
Tobias Brunner
b8bf01ddee
Do not install routes for pluto.
...
There are some incompatibilities with e.g. passthrough policies.
Pluto installs required source routes via updown script.
2010-09-02 19:04:24 +02:00
Tobias Brunner
76467e030c
pluto: Handle changed NAT mappings via libhydra's kernel interface.
2010-09-02 19:04:24 +02:00
Tobias Brunner
a0cbce9e7c
pluto: Removed no_klips flag (--noklips option).
2010-09-02 19:04:24 +02:00
Tobias Brunner
eeca1b0466
pluto: Removed references to KLIPS from documentation, log messages and comments.
2010-09-02 19:04:24 +02:00
Tobias Brunner
6374671110
pluto: Added --debug-kernel as alias for --debug-klips.
2010-09-02 19:04:24 +02:00
Tobias Brunner
ebdbf28a4a
pluto: Replaced DBG_KLIPS with DBG_KERNEL.
2010-09-02 19:04:24 +02:00
Tobias Brunner
8dade8e6eb
pluto: Removed the KLIPS preprocessor flag.
2010-09-02 19:04:24 +02:00
Tobias Brunner
fc06e34e46
pluto: Removed unneeded kernel abstractions.
2010-09-02 19:04:23 +02:00
Tobias Brunner
36ff473016
pluto: Completely removed struct kernel_ops.
2010-09-02 19:04:23 +02:00
Tobias Brunner
296972aeaf
pluto: Refactored PF_KEY capabilities registration.
...
Although we use the kernel interface from libhydra we still need this to make
the available algorithms known to pluto.
2010-09-02 19:04:23 +02:00
Tobias Brunner
4f898afc22
pluto: Removed unneeded functions from PF_KEY interface.
...
We still use the algorithm registration.
2010-09-02 19:04:23 +02:00
Tobias Brunner
03ee9623f3
pluto: Completely removed orphaned_holds.
2010-09-02 19:04:23 +02:00
Tobias Brunner
f6697eadb9
Scheduler and processor have been moved to libstrongswan.
...
Also reverts 0c21dc000d3cd5c82eb22c4481e6459978456364 as the dependency
to libcharon is no longer required.
2010-09-02 19:04:23 +02:00
Tobias Brunner
44b4f0d06f
pluto: Install IN policy of a shunt eroute with protocol.
2010-09-02 19:04:23 +02:00
Tobias Brunner
9052216813
pluto: Fixed byte-order of ports in traffic selectors.
2010-09-02 19:04:23 +02:00
Tobias Brunner
80c0328eec
testing: Print output of 'make oldconfig' to STDOUT, besides logging it.
2010-09-02 19:04:23 +02:00
Tobias Brunner
f32c0ce7b6
testing: Only sleep after a host has actually been started.
2010-09-02 19:04:22 +02:00
Tobias Brunner
ad808bc2a2
testing: Build strongSwan a bit faster using make -j.
2010-09-02 19:04:22 +02:00
Tobias Brunner
38dd45c480
testing: Force the UML Kernel to x86.
2010-09-02 19:04:22 +02:00
Tobias Brunner
91ea48352c
testing: Adding kernel-netlink to pluto.load statements.
2010-09-02 19:04:22 +02:00
Tobias Brunner
cc9cfc2e11
testing: Added missing host alice to test.conf.
2010-09-02 19:04:22 +02:00
Tobias Brunner
06cdeac25f
Charon specific strongswan.conf options generalized.
2010-09-02 19:04:22 +02:00
Tobias Brunner
c6fd7549e8
pluto: Listen for kernel events via libhydra's kernel interface.
2010-09-02 19:04:22 +02:00
Tobias Brunner
40bbff5dbf
pluto: Adapted kernel.c to changed kernel interface.
2010-09-02 19:04:22 +02:00
Tobias Brunner
71b6d2ff5e
Adapted child_sa_t to changed kernel interface.
2010-09-02 19:04:22 +02:00
Tobias Brunner
34cf6def83
Fixing installation of trap policies (SPI=0) in kernel interface.
2010-09-02 19:04:21 +02:00
Tobias Brunner
c3f4d68f0d
pluto: Do not close all file descriptors on startup, just redirect stdin, stdout and stderr to /dev/null.
...
Otherwise the pipe used to synchronize pluto->events with the main
thread would be closed.
2010-09-02 19:04:21 +02:00
Tobias Brunner
8808edfb4c
pluto: Added a generic event queue.
...
This allows to easily execute arbitrary callbacks in the context of the pluto
main thread (e.g. in order to synchronize with threads from the thread-pool).
2010-09-02 19:04:21 +02:00
Tobias Brunner
4cf459a054
pluto: Fixed the reqid that is passed to the updown script.
2010-09-02 19:04:21 +02:00
Tobias Brunner
199a415710
pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface.
2010-09-02 19:04:21 +02:00
Tobias Brunner
44643c2d01
pluto: Removed unneeded get_proto_reqid.
...
We will use the same reqid for all protocols, as in charon.
2010-09-02 19:04:21 +02:00
Tobias Brunner
717d60f13f
pluto: Added missing return_on in out_sa.
2010-09-02 19:04:21 +02:00
Tobias Brunner
1d61bcaabd
pluto: Use time_monotonic() instead of time() for use time calculation.
...
That's because get_sa_info now returns a monotonic timestamp.
2010-09-02 19:04:21 +02:00
Tobias Brunner
91f44a8bfc
pluto: Removed KLIPS specific code from was_eroute_idle.
2010-09-02 19:04:21 +02:00
Tobias Brunner
013698d51e
pluto: Migrated get_sa_info to libhydra's kernel interface.
2010-09-02 19:04:21 +02:00
Tobias Brunner
95898bcc56
pluto: Migrated teardown_half_ipsec_sa to libhydra's kernel interface.
2010-09-02 19:04:20 +02:00
Tobias Brunner
3ecf66c9e3
pluto: Adapted sag_eroute to the new signature of eroute_connection.
2010-09-02 19:04:20 +02:00
Tobias Brunner
952487d689
pluto: Migrated raw_eroute to libhydra's kernel interface.
...
This introduces a new struct to pass the protocol information like spis.
Also adapted eroute_connection and the simple calls of raw_eroute to
the new signature.
2010-09-02 19:04:20 +02:00
Tobias Brunner
deea15f04e
pluto: Added a function to create a traffic_selector_t from an ip_subnet.
2010-09-02 19:04:20 +02:00
Tobias Brunner
230aa11fb4
pluto: Migrated update_ipsec_sa to libhydra's kernel interface.
2010-09-02 19:04:20 +02:00
Tobias Brunner
1ad497c78f
pluto: Functions to convert IKEv1 ESP algos to IKEv2 identifiers added.
2010-09-02 19:04:20 +02:00
Tobias Brunner
7dd0c17cd4
pluto: Refactored IKEv2/IKEv1 crypto algorithm conversion functions.
2010-09-02 19:04:20 +02:00