aboutsummaryrefslogtreecommitdiffstats
path: root/main/strongswan
diff options
context:
space:
mode:
authorTimo Teräs <timo.teras@iki.fi>2015-07-17 14:01:21 +0300
committerTimo Teräs <timo.teras@iki.fi>2015-07-17 14:01:47 +0300
commit32d6d1f0411fceab73f6bb27b85d81e3730920b0 (patch)
treea0a13ea5f3da9d45d1c28daae72b348bb57da5a3 /main/strongswan
parent9c00e5a7629292528b2a18718c75f684b8b14528 (diff)
downloadaports-32d6d1f0411fceab73f6bb27b85d81e3730920b0.tar.bz2
aports-32d6d1f0411fceab73f6bb27b85d81e3730920b0.tar.xz
main/strongswan: add priorization for ikev1 messages
Diffstat (limited to 'main/strongswan')
-rw-r--r--main/strongswan/1005-ikev1-message-priorities.patch25
-rw-r--r--main/strongswan/APKBUILD6
2 files changed, 30 insertions, 1 deletions
diff --git a/main/strongswan/1005-ikev1-message-priorities.patch b/main/strongswan/1005-ikev1-message-priorities.patch
new file mode 100644
index 0000000000..f7bb7ac691
--- /dev/null
+++ b/main/strongswan/1005-ikev1-message-priorities.patch
@@ -0,0 +1,25 @@
+diff --git a/src/libcharon/processing/jobs/process_message_job.c b/src/libcharon/processing/jobs/process_message_job.c
+index a6795e7..bb77b3d 100644
+--- a/src/libcharon/processing/jobs/process_message_job.c
++++ b/src/libcharon/processing/jobs/process_message_job.c
+@@ -90,14 +90,20 @@ METHOD(job_t, get_priority, job_priority_t,
+ switch (this->message->get_exchange_type(this->message))
+ {
+ case IKE_AUTH:
++ case ID_PROT:
++ case AUTH_ONLY:
++ case AGGRESSIVE:
+ /* IKE auth is rather expensive and often blocking, low priority */
+ return JOB_PRIO_LOW;
+ case INFORMATIONAL:
++ case INFORMATIONAL_V1:
++ case TRANSACTION:
+ /* INFORMATIONALs are inexpensive, for DPD we should have low
+ * reaction times */
+ return JOB_PRIO_HIGH;
+ case IKE_SA_INIT:
+ case CREATE_CHILD_SA:
++ case QUICK_MODE:
+ default:
+ /* IKE_SA_INIT is expensive, but we will drop them in the receiver
+ * if we are overloaded */
diff --git a/main/strongswan/APKBUILD b/main/strongswan/APKBUILD
index f14ff2019c..82066ab1e5 100644
--- a/main/strongswan/APKBUILD
+++ b/main/strongswan/APKBUILD
@@ -3,7 +3,7 @@
pkgname=strongswan
pkgver=5.3.2
_pkgver=${pkgver//_rc/rc}
-pkgrel=4
+pkgrel=5
pkgdesc="IPsec-based VPN solution focused on security and ease of use, supporting IKEv1/IKEv2 and MOBIKE"
url="http://www.strongswan.org/"
arch="all"
@@ -25,6 +25,7 @@ source="http://download.strongswan.org/$pkgname-$_pkgver.tar.bz2
1002-vici-send-certificates-for-ike-sa-events.patch
1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
1004-vici-support-asynchronous-initiation.patch
+ 1005-ikev1-message-priorities.patch
2001-support-gre-key-in-ikev1.patch
strongswan.initd
@@ -118,6 +119,7 @@ b7244e10364e6348665048b9eec43cc6 1001-charon-add-optional-source-and-remote-ove
4970959a1722b4139e7a22a2d93e866d 1002-vici-send-certificates-for-ike-sa-events.patch
89f7d85291d6a82230e5337cfa071a67 1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
aac217481a1a8ae68719771039c27354 1004-vici-support-asynchronous-initiation.patch
+3accc4500255622cb14844e7111e2932 1005-ikev1-message-priorities.patch
b9f874287c35cce075b761087c28ab50 2001-support-gre-key-in-ikev1.patch
85ebc1b6c6b9c0c6640d8136e97da8e1 strongswan.initd
7962a720ebef6892d80a3cbdab72c204 charon.initd"
@@ -131,6 +133,7 @@ a3d471cbcc9481264352ca029b70ad8f85fab15495a4aef3cbb209fc19765436 1001-charon-ad
baa8ee13f207f5e89b34b759c355e48ed79138fabcd9af841692afb15cf8b61f 1002-vici-send-certificates-for-ike-sa-events.patch
e0de13d4fc6d66e33973696d62b4a45cd63b5fa6c477891e7651102c2bc3a4d7 1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
295476ace69d36f1059c48afb99ec5180086710146a6e10c28c7eed96759a976 1004-vici-support-asynchronous-initiation.patch
+0e814067bf47e9b4a0127b5197ea321e1398b1bc8e0635d576898fc977233d67 1005-ikev1-message-priorities.patch
ec58de15c3856a2fd9ea003b7e78a7434dad54f9a4c54d499b09a6eef3761d18 2001-support-gre-key-in-ikev1.patch
ad43d1ed2585d84e12ad1e67fbdfe93983c424c5c64b230d5027c0aae496c65f strongswan.initd
97b018796f0f15106b70694449cff36e8fc586292aab09ef83a05c0c13142e73 charon.initd"
@@ -144,6 +147,7 @@ ee5dc2d2c719895e69d9a0324b48d43b4b86122eb8848143db7a4a629e79d594deeb4a000a429c85
142e3207aa3646a82ed1831635ef16003b86625f763927d56e074aeb5d6d04f108a21f713f877afc48119ee3df784af727e5bee8dddf0671dc2a6058f9708af4 1002-vici-send-certificates-for-ike-sa-events.patch
1781b8de169d0d41f8cb4d63c0b85b1e9eae2d52935d3753a876e8fee542ab58933be11c36f2a230233144c94c12c1d7641dbb58c89481e27d889e7f17fad87e 1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
aaf0701a4564fdce9d4422e8c33ea704142e371392cb7fa552cf0c71cb00d0dbd5901c21e45fadc23798cfdb95066da9d24b2f2b9b037761e670ee30f4b93b35 1004-vici-support-asynchronous-initiation.patch
+bd4c9575d2aebbae48d49ef5e3fcfa0c0366c8d100a0190706b5fff7332ab34ca5f862ba8a3fe9cdcf9996371b554ab0f6561e16d57d6e425497ab015e46299a 1005-ikev1-message-priorities.patch
723aad9269ae7da54b1d551b290c80951c3b779737353fa845c00d190c9ef6c6bc406d8ed22254a27844985b7ffaa12b99acce91ec0b192caf639c81b06bf771 2001-support-gre-key-in-ikev1.patch
b56008c07b804dacb3441d3802880058986ab7b314297fe485649a771861885b9232f9fd53b94faa3388a5e9330e2b38a86af5c04f3ff119199720043967ec64 strongswan.initd
6f3abaaa8da0925f06cdd184fdf534518e40c49533dba427dbf31dbe88172e5626bdc9aadf798d791f82fbded08801c1f565d514e2c289e1f28448d0c2e72b79 charon.initd"