Age | Commit message (Collapse) | Author |
|
author: niklas
Do not try to establish an encryption key for AH
|
|
pf_key_v2.c: Merge with EOM 1.18
author: niklas
Support building on older PF_KEY systems with non-standard-compliant SADB_-
constants.
|
|
pf_key_v2.c: Merge with EOM 1.17
author: niklas
Merge in fixes done in the OpenBSD tree
|
|
|
|
author: niklas
As PF_KEY per the specs is a best-effort service, expect messages to get lost.
That means both replies in PF_KEY "RPCs" and expirations, the latter we
solve with extra paranoia and sets timeouts in isakmpd too.
|
|
author: niklas
typo in debug output
author: niklas
A new connection abstraction
|
|
author: niklas
Sigh, tunnel mode needs a special flag.
|
|
author: niklas
Remove unused macro.
|
|
exchange_establish do checking of existing exchanges these days
Remove SA_FLAG_REPLACED settings from various parts in preparation of a
grand unified setting in exchange_finalize. Fix sa_mark_replaced to not
release a referance to the sa, and adjust the API as it won't get called
as a finalize func anymore.
|
|
Typecast correct
Get a private copy of connection names that should live forever.
New finalize API.
Make "Connections" handling nicer, and even implement it for KLIPS.
A stab at reregestering the on-demand routes for PF_ENCAP.
|
|
Add a connection checker thread, that sees to that required connections
will get restarted if they die for an abnormal reason.
|
|
Use SA refcounting where needed. Until we have ACQUIRES do phase 2
connections automatically at startup.
|
|
ipsec.h: Merge with EOM 1.33
pf_encap.c: Merge with EOM 1.52
pf_key_v2.c: Merge with EOM 1.3
Fix case of missing client ID payloads, a case the standards allow. Thanks
to Michael Paddon (mwp@aba.net.au) for the diffs I based my fix upon. His
diff also made me realize I stored the address information in host order in
internal structures where I had planned to use network order. Fix this,
and remove the XXXes I had due to this elsewhere. Add commentary.
|
|
Use flow replacment openbsd extension. Deleted flows when deleting SAs.
Handle expirations. General cleanup.
|
|
|