diff options
author | Martin Willi <martin@strongswan.org> | 2006-05-31 14:23:15 +0000 |
---|---|---|
committer | Martin Willi <martin@strongswan.org> | 2006-05-31 14:23:15 +0000 |
commit | 32b6500fbfe063f3efb5589facd027f4c6cf08ed (patch) | |
tree | c434114b344ff3a134ebf245a6865ff2794da590 /src/charon/encoding/message.c | |
parent | 6f2aba1322ce0061c56b9faeb979c236da926c3f (diff) | |
download | strongswan-32b6500fbfe063f3efb5589facd027f4c6cf08ed.tar.bz2 strongswan-32b6500fbfe063f3efb5589facd027f4c6cf08ed.tar.xz |
job management:
moved job code from thread_pool to job, jobs have an "execute" method now
added two new jobs: delete_child_sa & rekey_child_sa
kernel interface:
listens now for ACQUIRE & EXPIRE
supports hard and soft lifetimes
fires jobs for delete and rekey child sa
ike sa manager:
can checkout IKE SAs by requid of owned CHILD SAs
we have now the infrastructure to do the rekeying... :-)
Diffstat (limited to 'src/charon/encoding/message.c')
-rw-r--r-- | src/charon/encoding/message.c | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/src/charon/encoding/message.c b/src/charon/encoding/message.c index 24b4d8e69..8a7998e66 100644 --- a/src/charon/encoding/message.c +++ b/src/charon/encoding/message.c @@ -184,6 +184,32 @@ static payload_rule_t informational_r_payload_rules[] = { {DELETE,0,1,TRUE,FALSE}, }; +/** + * Message rule for CREATE_CHILD_SA from initiator. + */ +static payload_rule_t create_child_sa_r_payload_rules[] = { + {NOTIFY,0,MAX_NOTIFY_PAYLOADS,TRUE,FALSE}, + {SECURITY_ASSOCIATION,1,1,TRUE,FALSE}, + {NONCE,1,1,TRUE,FALSE}, + {KEY_EXCHANGE,0,1,TRUE,FALSE}, + {TRAFFIC_SELECTOR_INITIATOR,0,1,TRUE,FALSE}, + {TRAFFIC_SELECTOR_RESPONDER,0,1,TRUE,FALSE}, + {CONFIGURATION,0,1,TRUE,FALSE}, +}; + +/** + * Message rule for CREATE_CHILD_SA from responder. + */ +static payload_rule_t create_child_sa_i_payload_rules[] = { + {NOTIFY,0,MAX_NOTIFY_PAYLOADS,TRUE,FALSE}, + {SECURITY_ASSOCIATION,1,1,TRUE,FALSE}, + {NONCE,1,1,TRUE,FALSE}, + {KEY_EXCHANGE,0,1,TRUE,FALSE}, + {TRAFFIC_SELECTOR_INITIATOR,0,1,TRUE,FALSE}, + {TRAFFIC_SELECTOR_RESPONDER,0,1,TRUE,FALSE}, + {CONFIGURATION,0,1,TRUE,FALSE}, +}; + /** * Message rules, defines allowed payloads. |