[strongSwan-dev] Patch proposals

Emeric POUPON emeric.poupon at stormshield.eu
Tue Aug 11 17:04:00 CEST 2015


Hello,

Please find attached some of the patches we have applied.
The goal is mainly to ease integration with our build environment

patch-0000-ha-flush-segment -> Add a command to flush all the SA of a HA segment
patch-0001-alert-initial-contact -> Add an alert to listen to INITIAL CONTACT events
patch-0002-libhydra-flush-only-managed-sas -> do not flush everything but only managed SA types (AH, ESP, IPCOMP) -> Leave intact SA inserted by other daemons like bird.
patch-0003-ha-fifo-sanity-checks -> Add some checks on the HA ctl file
patch-0004-ha-sync-delay -> Already in a branch on github. The goal is to request a sync only once the configuration has been completely reloaded.
patch-0005-disable-backtrace-use -> Condition "backtrace" since we do not have backtrace available on our systems
patch-0006-fix-compile-warnings -> Fix some of the warnings we got on our toolchain
patch-0007-kernel_pfroute-virtual-ip-option -> implement the install_virtual_ip option for the kernel_pfroute plugin

We have other patches mainly on config reload but they seem to change strongSwan's current behavior too much to be integrated.

Please feel free to integrate/modify what you may consider useful for others.

Best Regards,

Emeric
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-0004-ha-sync-delay
Type: text/x-patch
Size: 6774 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20150811/a55e8f63/attachment-0008.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-0001-alert-initial-contact
Type: text/x-patch
Size: 1217 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20150811/a55e8f63/attachment-0009.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-0002-libhydra-flush-only-managed-sas
Type: text/x-patch
Size: 2002 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20150811/a55e8f63/attachment-0010.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-0003-ha-fifo-sanity-checks
Type: text/x-patch
Size: 2471 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20150811/a55e8f63/attachment-0011.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-0006-fix-compile-warnings
Type: text/x-patch
Size: 8384 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20150811/a55e8f63/attachment-0012.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-0005-disable-backtrace-use
Type: text/x-patch
Size: 8011 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20150811/a55e8f63/attachment-0013.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-0000-ha-flush-segments
Type: text/x-patch
Size: 4727 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20150811/a55e8f63/attachment-0014.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-0007-kernel_pfroute-virtual-ip-option
Type: text/x-patch
Size: 1521 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20150811/a55e8f63/attachment-0015.bin>


More information about the Dev mailing list