[strongSwan-dev] [PATCH 0/4] Respin of dmvpn support patches for 5.4.0
timo.teras at iki.fi
Wed Mar 30 09:00:03 CEST 2016
I'm resending again (the now rebased based on top of 5.4.0) patches for
quagga/nhrp implementation of dmvpn.
The first patch is Tobias' initiatior IKA_SA limit patch which apparently
never was merged to master. Please consider taking it.
The three others patches are the remaining bits of the charin infrastructure
and vici changes needed to instantiate connections by manager. It basically
allows to "kernel acquire" messages to be sent via vici interface.
So far the discussion has been "we rather not do this". The alternative
uggestion to add connection per link does not work for this use case.
My previous email explained the reasons in detail.
So please reconsider applying this. Or at least let's have a proper
discussion how this could be done in such a way that it would be
acceptable for you, and usable for me.
Timo Teräs (3):
charon: add optional source and remote overrides for initiate
vici: send certificates for ike-sa events
vici: add support for individual sa state changes
Tobias Brunner (1):
ike: Adhere to IKE_SA limit when checking out by config
src/charon-cmd/cmd/cmd_connection.c | 2 +-
src/charon-nm/nm/nm_service.c | 2 +-
src/libcharon/control/controller.c | 43 ++++++-
src/libcharon/control/controller.h | 3 +
src/libcharon/plugins/maemo/maemo_service.c | 2 +-
src/libcharon/plugins/stroke/stroke_control.c | 5 +-
src/libcharon/plugins/vici/vici_config.c | 2 +-
src/libcharon/plugins/vici/vici_control.c | 63 ++++++++--
src/libcharon/plugins/vici/vici_query.c | 153 +++++++++++++++++++++--
src/libcharon/processing/jobs/start_action_job.c | 2 +-
src/libcharon/sa/ike_sa_manager.c | 116 ++++++++++++-----
src/libcharon/sa/ike_sa_manager.h | 8 +-
src/libcharon/sa/trap_manager.c | 46 +++----
src/swanctl/commands/initiate.c | 40 +++++-
14 files changed, 400 insertions(+), 87 deletions(-)
More information about the Dev