]> git.ipfire.org Git - thirdparty/strongswan.git/commit
ipsec-sa-mgr: Optionally keep track of acquires for outbound SAs
authorTobias Brunner <tobias@strongswan.org>
Thu, 4 May 2023 12:20:09 +0000 (14:20 +0200)
committerTobias Brunner <tobias@strongswan.org>
Tue, 23 May 2023 09:53:51 +0000 (11:53 +0200)
commit4e9acf98d0e2e256e8994b94361d653c1c019f31
tree811b53f1f97242fee9057f2de95e1b51b33bfc72
parentec503ade58d3c84169f0517e79e9d2ecd6bd1949
ipsec-sa-mgr: Optionally keep track of acquires for outbound SAs

Currently just based on the reqid.  An acquire for the same reqid is
triggered at most every 10 seconds (gets ignored in trap_manager_t if
the SA is still getting established).

Entries are only cleaned up if an SA is eventually installed (similar to
the allocated SPIs).  Should that ever be a problem, we could probably
schedule a job that regularly flushes old entries.
src/libipsec/ipsec_processor.c
src/libipsec/ipsec_sa_mgr.c
src/libipsec/ipsec_sa_mgr.h