tteras/strongswan/src/libcharon/plugins/kernel_pfkey, branch 5.6.0dr3

linked-list: Change return value of find_first() and signature of its callback

2017-05-26T11:56:44+00:00

This avoids the unportable five pointer hack.

linked-list: Change interface of callback for invoke_function()

2017-05-26T11:56:44+00:00

This avoids the unportable five pointer hack.

kernel-pfkey: Update SA addresses if supported by the kernel

2017-05-23T15:58:50+00:00

Upcoming FreeBSD kernels will support updating the addresses of existing
SAs with new SADB_X_EXT_NEW_ADDRESS_SRC|DST extensions for the SADB_UPDATE
message.

kernel-pfkey: Use new encap flag on Mac OS X when updating SAs

2017-05-23T15:58:50+00:00

kernel: Make range of SPIs for IPsec SAs configurable

2017-03-02T07:52:56+00:00

kernel-pfkey: Use the same priority range for trap and regular policies

2017-02-08T09:36:38+00:00

Same as the change in the kernel-netlink plugin.

kernel-pfkey: Set state to SADB_SASTATE_MATURE when adding/updating SAs

2017-01-25T16:30:57+00:00

Picky kernels might otherwise reject our messages as RFC 2367 explicitly
mandates this.

Fixes #2212.

kernel-pfkey: Only set the replay window for inbound SAs

2016-06-17T16:46:33+00:00

It is not necessary for outbound SAs and might waste memory when large
window sizes are used.

kernel-pfkey: Install routes with OUT policies

2016-06-10T13:25:46+00:00

kernel-pfkey: Don't install routes for drop policies and if protocol/ports are in the selector

2016-06-10T13:25:05+00:00