tteras/strongswan/src/libhydra/plugins, branch master

libhydra: Move all kernel plugins to libcharon

2016-03-03T16:36:11+00:00

kernel-netlink: Allow Netlink send buffer size to be configured via compile option

2016-02-12T14:08:34+00:00

The receive buffer size can already be changed via strongswan.conf if
necessary.

kernel-pfkey: Enable ENCR_CAMELLIA_CBC when it's available

2015-11-23T10:20:30+00:00

Fixes #1214.

kernel-netlink: Allow IPsec policies to replace shunt policies

2015-11-10T15:42:53+00:00

Shunt policies don't have a reqid set, so we allow unequal reqids in
this particular case (i.e. if one of the reqids is 0).

kernel-pfkey: Make absolutely sure we always delete the right policy cache entry

2015-11-10T15:42:53+00:00

kernel-netlink: Make absolutely sure we always delete the right policy cache entry

2015-11-10T15:42:53+00:00

kernel-interface: Pass the same data to del_policy() that was passed to add_policy()

2015-11-10T15:42:52+00:00

The additional data can be helpful to identify the exact policy to
delete.

kernel-netlink: Remove the unused policy_history flag

2015-11-10T14:42:16+00:00

This was used with pluto, which had its own policy tracking.

kernel-pfkey: Enable ENCR_AES_CTR when it's available

2015-11-09T11:01:18+00:00

Obtained-from:	pfSense
Sponsored-by:	Rubicon Communications (Netgate)
Closes strongswan/strongswan#17.

kernel-netlink: Properly set port mask for ICMP type/code if only set on one side

2015-08-31T13:30:57+00:00

If only one traffic selector had a port (type/code) the other side had
the port mask set to 0, which canceled out the applied type/code.

It also fixes the installation of ICMP type/code on big-endian hosts.

Fixes #1091.
References #595.