tteras/strongswan/src/libcharon/plugins/kernel_libipsec, branch master

linked-list: Change return value of find_first() and signature of its callback

2017-05-26T11:56:44+00:00

This avoids the unportable five pointer hack.

kernel-net: Let get_nexthop() return an optional interface name

2016-06-10T11:54:18+00:00

The returned name should be the interface over which the destination
address/net is reachable.

kernel: Use structs to pass information to the kernel-ipsec interface

2016-04-09T14:50:59+00:00

Use standard unsigned integer types

2016-03-24T17:52:48+00:00

libhydra: Remove empty unused library

2016-03-03T16:36:11+00:00

libhydra: Move kernel interface to libcharon

2016-03-03T16:36:11+00:00

This moves hydra->kernel_interface to charon->kernel.

libipsec: Pass the same data to del_policy() as to add_policy()

2016-02-04T10:02:59+00:00

We already do this for the other kernel interfaces.

Fixes e1e88d5adde0 ("libipsec: Don't attempt deletion of any non-IPsec policies")

kernel-interface: Pass the same data to del_policy() that was passed to add_policy()

2015-11-10T15:42:52+00:00

The additional data can be helpful to identify the exact policy to
delete.

libipsec: Pass separate inbound/update flags to the IPsec SA manager

2015-03-09T17:18:20+00:00

Similar to other kernel interfaces, the libipsec backends uses the flag for
different purposes, and therefore should get separate flags.

kernel-interface: Add a separate "update" flag to add_sa()

2015-03-09T17:18:20+00:00

The current "inbound" flag is used for two purposes: To define the actual
direction of the SA, but also to determine the operation used for SA
installation. If an SPI has been allocated, an update operation is required
instead of an add.

While the inbound flag normally defines the kind of operation required, this
is not necessarily true in all cases. On the HA passive node, we install inbound
SAs without prior SPI allocation.