5868 Commits

Author SHA1 Message Date
Tobias Brunner
fe962bc788 testing: Added ikev1 xfrm mark scenarios. 2010-09-02 19:04:25 +02:00
Tobias Brunner
f8edbc22c7 pluto: Make marks available in updown script. 2010-09-02 19:04:25 +02:00
Tobias Brunner
190ee00c94 pluto: Fixed comparison of connections, if marks are specified. 2010-09-02 19:04:25 +02:00
Tobias Brunner
a280ba9525 pluto: Store xfrm marks on connection and use them when installing SAs and policies. 2010-09-02 19:04:25 +02:00
Tobias Brunner
a0d13f42e6 starter: Some whitespace cleanup. 2010-09-02 19:04:25 +02:00
Tobias Brunner
f23e7394ae pluto: Added PLUTO_UDP_ENC argument to updown script.
This contains the remote UDP port in case of UDP encapsulated ESP.
2010-09-02 19:04:25 +02:00
Tobias Brunner
3251294ceb pluto: Return value fixed. 2010-09-02 19:04:25 +02:00
Tobias Brunner
d499bdf393 pluto: Removed bare shunt table. 2010-09-02 19:04:24 +02:00
Tobias Brunner
b8bf01ddee Do not install routes for pluto.
There are some incompatibilities with e.g. passthrough policies.
Pluto installs required source routes via updown script.
2010-09-02 19:04:24 +02:00
Tobias Brunner
76467e030c pluto: Handle changed NAT mappings via libhydra's kernel interface. 2010-09-02 19:04:24 +02:00
Tobias Brunner
a0cbce9e7c pluto: Removed no_klips flag (--noklips option). 2010-09-02 19:04:24 +02:00
Tobias Brunner
eeca1b0466 pluto: Removed references to KLIPS from documentation, log messages and comments. 2010-09-02 19:04:24 +02:00
Tobias Brunner
6374671110 pluto: Added --debug-kernel as alias for --debug-klips. 2010-09-02 19:04:24 +02:00
Tobias Brunner
ebdbf28a4a pluto: Replaced DBG_KLIPS with DBG_KERNEL. 2010-09-02 19:04:24 +02:00
Tobias Brunner
8dade8e6eb pluto: Removed the KLIPS preprocessor flag. 2010-09-02 19:04:24 +02:00
Tobias Brunner
fc06e34e46 pluto: Removed unneeded kernel abstractions. 2010-09-02 19:04:23 +02:00
Tobias Brunner
36ff473016 pluto: Completely removed struct kernel_ops. 2010-09-02 19:04:23 +02:00
Tobias Brunner
296972aeaf pluto: Refactored PF_KEY capabilities registration.
Although we use the kernel interface from libhydra we still need this to make
the available algorithms known to pluto.
2010-09-02 19:04:23 +02:00
Tobias Brunner
4f898afc22 pluto: Removed unneeded functions from PF_KEY interface.
We still use the algorithm registration.
2010-09-02 19:04:23 +02:00
Tobias Brunner
03ee9623f3 pluto: Completely removed orphaned_holds. 2010-09-02 19:04:23 +02:00
Tobias Brunner
f6697eadb9 Scheduler and processor have been moved to libstrongswan.
Also reverts 0c21dc000d3cd5c82eb22c4481e6459978456364 as the dependency
to libcharon is no longer required.
2010-09-02 19:04:23 +02:00
Tobias Brunner
44b4f0d06f pluto: Install IN policy of a shunt eroute with protocol. 2010-09-02 19:04:23 +02:00
Tobias Brunner
9052216813 pluto: Fixed byte-order of ports in traffic selectors. 2010-09-02 19:04:23 +02:00
Tobias Brunner
80c0328eec testing: Print output of 'make oldconfig' to STDOUT, besides logging it. 2010-09-02 19:04:23 +02:00
Tobias Brunner
f32c0ce7b6 testing: Only sleep after a host has actually been started. 2010-09-02 19:04:22 +02:00
Tobias Brunner
ad808bc2a2 testing: Build strongSwan a bit faster using make -j. 2010-09-02 19:04:22 +02:00
Tobias Brunner
38dd45c480 testing: Force the UML Kernel to x86. 2010-09-02 19:04:22 +02:00
Tobias Brunner
91ea48352c testing: Adding kernel-netlink to pluto.load statements. 2010-09-02 19:04:22 +02:00
Tobias Brunner
cc9cfc2e11 testing: Added missing host alice to test.conf. 2010-09-02 19:04:22 +02:00
Tobias Brunner
06cdeac25f Charon specific strongswan.conf options generalized. 2010-09-02 19:04:22 +02:00
Tobias Brunner
c6fd7549e8 pluto: Listen for kernel events via libhydra's kernel interface. 2010-09-02 19:04:22 +02:00
Tobias Brunner
40bbff5dbf pluto: Adapted kernel.c to changed kernel interface. 2010-09-02 19:04:22 +02:00
Tobias Brunner
71b6d2ff5e Adapted child_sa_t to changed kernel interface. 2010-09-02 19:04:22 +02:00
Tobias Brunner
34cf6def83 Fixing installation of trap policies (SPI=0) in kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner
c3f4d68f0d pluto: Do not close all file descriptors on startup, just redirect stdin, stdout and stderr to /dev/null.
Otherwise the pipe used to synchronize pluto->events with the main
thread would be closed.
2010-09-02 19:04:21 +02:00
Tobias Brunner
8808edfb4c pluto: Added a generic event queue.
This allows to easily execute arbitrary callbacks in the context of the pluto
main thread (e.g. in order to synchronize with threads from the thread-pool).
2010-09-02 19:04:21 +02:00
Tobias Brunner
4cf459a054 pluto: Fixed the reqid that is passed to the updown script. 2010-09-02 19:04:21 +02:00
Tobias Brunner
199a415710 pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner
44643c2d01 pluto: Removed unneeded get_proto_reqid.
We will use the same reqid for all protocols, as in charon.
2010-09-02 19:04:21 +02:00
Tobias Brunner
717d60f13f pluto: Added missing return_on in out_sa. 2010-09-02 19:04:21 +02:00
Tobias Brunner
1d61bcaabd pluto: Use time_monotonic() instead of time() for use time calculation.
That's because get_sa_info now returns a monotonic timestamp.
2010-09-02 19:04:21 +02:00
Tobias Brunner
91f44a8bfc pluto: Removed KLIPS specific code from was_eroute_idle. 2010-09-02 19:04:21 +02:00
Tobias Brunner
013698d51e pluto: Migrated get_sa_info to libhydra's kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner
95898bcc56 pluto: Migrated teardown_half_ipsec_sa to libhydra's kernel interface. 2010-09-02 19:04:20 +02:00
Tobias Brunner
3ecf66c9e3 pluto: Adapted sag_eroute to the new signature of eroute_connection. 2010-09-02 19:04:20 +02:00
Tobias Brunner
952487d689 pluto: Migrated raw_eroute to libhydra's kernel interface.
This introduces a new struct to pass the protocol information like spis.
Also adapted eroute_connection and the simple calls of raw_eroute to
the new signature.
2010-09-02 19:04:20 +02:00
Tobias Brunner
deea15f04e pluto: Added a function to create a traffic_selector_t from an ip_subnet. 2010-09-02 19:04:20 +02:00
Tobias Brunner
230aa11fb4 pluto: Migrated update_ipsec_sa to libhydra's kernel interface. 2010-09-02 19:04:20 +02:00
Tobias Brunner
1ad497c78f pluto: Functions to convert IKEv1 ESP algos to IKEv2 identifiers added. 2010-09-02 19:04:20 +02:00
Tobias Brunner
7dd0c17cd4 pluto: Refactored IKEv2/IKEv1 crypto algorithm conversion functions. 2010-09-02 19:04:20 +02:00