diff options
| author | Timo Teräs <timo.teras@iki.fi> | 2015-07-17 14:01:21 +0300 |
|---|---|---|
| committer | Timo Teräs <timo.teras@iki.fi> | 2015-07-17 14:01:47 +0300 |
| commit | 32d6d1f0411fceab73f6bb27b85d81e3730920b0 (patch) | |
| tree | a0a13ea5f3da9d45d1c28daae72b348bb57da5a3 /main/strongswan | |
| parent | 9c00e5a7629292528b2a18718c75f684b8b14528 (diff) | |
| download | aports-32d6d1f0411fceab73f6bb27b85d81e3730920b0.tar.bz2 aports-32d6d1f0411fceab73f6bb27b85d81e3730920b0.tar.xz | |
main/strongswan: add priorization for ikev1 messages
Diffstat (limited to 'main/strongswan')
| -rw-r--r-- | main/strongswan/1005-ikev1-message-priorities.patch | 25 | ||||
| -rw-r--r-- | main/strongswan/APKBUILD | 6 |
2 files changed, 30 insertions, 1 deletions
diff --git a/main/strongswan/1005-ikev1-message-priorities.patch b/main/strongswan/1005-ikev1-message-priorities.patch new file mode 100644 index 000000000..f7bb7ac69 --- /dev/null +++ b/main/strongswan/1005-ikev1-message-priorities.patch @@ -0,0 +1,25 @@ +diff --git a/src/libcharon/processing/jobs/process_message_job.c b/src/libcharon/processing/jobs/process_message_job.c +index a6795e7..bb77b3d 100644 +--- a/src/libcharon/processing/jobs/process_message_job.c ++++ b/src/libcharon/processing/jobs/process_message_job.c +@@ -90,14 +90,20 @@ METHOD(job_t, get_priority, job_priority_t, + switch (this->message->get_exchange_type(this->message)) + { + case IKE_AUTH: ++ case ID_PROT: ++ case AUTH_ONLY: ++ case AGGRESSIVE: + /* IKE auth is rather expensive and often blocking, low priority */ + return JOB_PRIO_LOW; + case INFORMATIONAL: ++ case INFORMATIONAL_V1: ++ case TRANSACTION: + /* INFORMATIONALs are inexpensive, for DPD we should have low + * reaction times */ + return JOB_PRIO_HIGH; + case IKE_SA_INIT: + case CREATE_CHILD_SA: ++ case QUICK_MODE: + default: + /* IKE_SA_INIT is expensive, but we will drop them in the receiver + * if we are overloaded */ diff --git a/main/strongswan/APKBUILD b/main/strongswan/APKBUILD index f14ff2019..82066ab1e 100644 --- a/main/strongswan/APKBUILD +++ b/main/strongswan/APKBUILD @@ -3,7 +3,7 @@ pkgname=strongswan pkgver=5.3.2 _pkgver=${pkgver//_rc/rc} -pkgrel=4 +pkgrel=5 pkgdesc="IPsec-based VPN solution focused on security and ease of use, supporting IKEv1/IKEv2 and MOBIKE" url="http://www.strongswan.org/" arch="all" @@ -25,6 +25,7 @@ source="http://download.strongswan.org/$pkgname-$_pkgver.tar.bz2 1002-vici-send-certificates-for-ike-sa-events.patch 1003-vici-add-support-rekeying-events-and-individual-sa-s.patch 1004-vici-support-asynchronous-initiation.patch + 1005-ikev1-message-priorities.patch 2001-support-gre-key-in-ikev1.patch strongswan.initd @@ -118,6 +119,7 @@ b7244e10364e6348665048b9eec43cc6 1001-charon-add-optional-source-and-remote-ove 4970959a1722b4139e7a22a2d93e866d 1002-vici-send-certificates-for-ike-sa-events.patch 89f7d85291d6a82230e5337cfa071a67 1003-vici-add-support-rekeying-events-and-individual-sa-s.patch aac217481a1a8ae68719771039c27354 1004-vici-support-asynchronous-initiation.patch +3accc4500255622cb14844e7111e2932 1005-ikev1-message-priorities.patch b9f874287c35cce075b761087c28ab50 2001-support-gre-key-in-ikev1.patch 85ebc1b6c6b9c0c6640d8136e97da8e1 strongswan.initd 7962a720ebef6892d80a3cbdab72c204 charon.initd" @@ -131,6 +133,7 @@ a3d471cbcc9481264352ca029b70ad8f85fab15495a4aef3cbb209fc19765436 1001-charon-ad baa8ee13f207f5e89b34b759c355e48ed79138fabcd9af841692afb15cf8b61f 1002-vici-send-certificates-for-ike-sa-events.patch e0de13d4fc6d66e33973696d62b4a45cd63b5fa6c477891e7651102c2bc3a4d7 1003-vici-add-support-rekeying-events-and-individual-sa-s.patch 295476ace69d36f1059c48afb99ec5180086710146a6e10c28c7eed96759a976 1004-vici-support-asynchronous-initiation.patch +0e814067bf47e9b4a0127b5197ea321e1398b1bc8e0635d576898fc977233d67 1005-ikev1-message-priorities.patch ec58de15c3856a2fd9ea003b7e78a7434dad54f9a4c54d499b09a6eef3761d18 2001-support-gre-key-in-ikev1.patch ad43d1ed2585d84e12ad1e67fbdfe93983c424c5c64b230d5027c0aae496c65f strongswan.initd 97b018796f0f15106b70694449cff36e8fc586292aab09ef83a05c0c13142e73 charon.initd" @@ -144,6 +147,7 @@ ee5dc2d2c719895e69d9a0324b48d43b4b86122eb8848143db7a4a629e79d594deeb4a000a429c85 142e3207aa3646a82ed1831635ef16003b86625f763927d56e074aeb5d6d04f108a21f713f877afc48119ee3df784af727e5bee8dddf0671dc2a6058f9708af4 1002-vici-send-certificates-for-ike-sa-events.patch 1781b8de169d0d41f8cb4d63c0b85b1e9eae2d52935d3753a876e8fee542ab58933be11c36f2a230233144c94c12c1d7641dbb58c89481e27d889e7f17fad87e 1003-vici-add-support-rekeying-events-and-individual-sa-s.patch aaf0701a4564fdce9d4422e8c33ea704142e371392cb7fa552cf0c71cb00d0dbd5901c21e45fadc23798cfdb95066da9d24b2f2b9b037761e670ee30f4b93b35 1004-vici-support-asynchronous-initiation.patch +bd4c9575d2aebbae48d49ef5e3fcfa0c0366c8d100a0190706b5fff7332ab34ca5f862ba8a3fe9cdcf9996371b554ab0f6561e16d57d6e425497ab015e46299a 1005-ikev1-message-priorities.patch 723aad9269ae7da54b1d551b290c80951c3b779737353fa845c00d190c9ef6c6bc406d8ed22254a27844985b7ffaa12b99acce91ec0b192caf639c81b06bf771 2001-support-gre-key-in-ikev1.patch b56008c07b804dacb3441d3802880058986ab7b314297fe485649a771861885b9232f9fd53b94faa3388a5e9330e2b38a86af5c04f3ff119199720043967ec64 strongswan.initd 6f3abaaa8da0925f06cdd184fdf534518e40c49533dba427dbf31dbe88172e5626bdc9aadf798d791f82fbded08801c1f565d514e2c289e1f28448d0c2e72b79 charon.initd" |