tteras/strongswan/src/libcharon/plugins/kernel_wfp, branch master

kernel-wfp: Don't redefine IPPROTO_IP* if already defined

2017-03-23T17:29:18+00:00

kernel-net: Let get_nexthop() return an optional interface name

2016-06-10T11:54:18+00:00

The returned name should be the interface over which the destination
address/net is reachable.

kernel: Use structs to pass information to the kernel-ipsec interface

2016-04-09T14:50:59+00:00

Use standard unsigned integer types

2016-03-24T17:52:48+00:00

libhydra: Remove empty unused library

2016-03-03T16:36:11+00:00

libhydra: Move kernel interface to libcharon

2016-03-03T16:36:11+00:00

This moves hydra->kernel_interface to charon->kernel.

kernel-interface: Pass the same data to del_policy() that was passed to add_policy()

2015-11-10T15:42:52+00:00

The additional data can be helpful to identify the exact policy to
delete.

kernel-interface: Add a separate "update" flag to add_sa()

2015-03-09T17:18:20+00:00

The current "inbound" flag is used for two purposes: To define the actual
direction of the SA, but also to determine the operation used for SA
installation. If an SPI has been allocated, an update operation is required
instead of an add.

While the inbound flag normally defines the kind of operation required, this
is not necessarily true in all cases. On the HA passive node, we install inbound
SAs without prior SPI allocation.

kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqid

2015-02-20T12:34:50+00:00

kernel-interface: Pass full list of traffic selectors to add_sa()

2015-02-20T12:34:47+00:00

While we can handle the first selector only in BEET mode in kernel-netlink,
passing the full list gives the backend more flexibility how to handle this
information.