tteras/strongswan/src/libcharon/plugins/kernel_libipsec, branch 5.2.1rc1

kernel-interface: Add destination prefix to get_nexthop()

2014-06-19T12:33:40+00:00

This allows to determine the next hop to reach a subnet, for instance, when
installing routes for shunt policies.

kernel-interface: Add a replay_window parameter to add_sa()

2014-06-17T14:41:30+00:00

plugins: Don't link with -rdynamic on Windows

2014-06-04T13:53:02+00:00

libcharon: Use lib->ns instead of charon->name

2014-02-12T13:34:32+00:00

libhydra: Use lib->ns instead of hydra->daemon

2014-02-12T13:34:32+00:00

kernel-libipsec: Don't ignore policies of type != POLICY_IPSEC

2013-10-11T13:32:44+00:00

This actually broke rekeying due to the DROP policies that are
temporarily added, which broke the refcount as the ignored policies
were not ignored in del_policy() (the type is not known there).

kernel-libipsec: Add an option to allow remote TS to match the IKE peer

2013-10-11T13:32:44+00:00

Setting the fwmark options for the kernel-netlink and socket-default
plugins allow this kind of setup.

It is probably required to set net.ipv4.conf.all.rp_filter to 2 to make
it work.

kernel-libipsec: Support ESPv3 TFC padding

2013-10-11T08:23:18+00:00

kernel-libipsec: Support query_sa() to report usage statistics

2013-10-11T08:23:17+00:00

kernel: Use a time_t to report use time in query_policy()

2013-10-11T08:23:17+00:00