]> git.ipfire.org Git - thirdparty/strongswan.git/commit
kernel-netlink: Add manager for XFRM interfaces
authorTobias Brunner <tobias@strongswan.org>
Mon, 11 Jul 2022 11:12:46 +0000 (13:12 +0200)
committerTobias Brunner <tobias@strongswan.org>
Wed, 22 Feb 2023 12:37:45 +0000 (13:37 +0100)
commite1ff1eefcffb356213a3e119de19149fcc2474cd
treef4d17dc37eb775abfd352466670ae1425e0d7afb
parent85d56b1c6adecd97007f58280800b341889bdc80
kernel-netlink: Add manager for XFRM interfaces

The manager will allow charon-nm to create XFRM interfaces if supported
by the kernel instead of creating an unused dummy TUN interface.

The xfrmi tool is mostly obsolete nowadays as iproute2 supports creating
XFRM interfaces since 5.1.0 (2019-05).  Older Debians don't ship that and
early versions didn't list the interface IDs.  So there might still be
some uses for this tool.
12 files changed:
src/libcharon/plugins/kernel_netlink/Makefile.am
src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
src/libcharon/plugins/kernel_netlink/kernel_netlink_xfrmi.c [new file with mode: 0644]
src/libcharon/plugins/kernel_netlink/kernel_netlink_xfrmi.h [new file with mode: 0644]
src/xfrmi/xfrmi.c
testing/tests/route-based/net2net-xfrmi-ike/hosts/sun/etc/updown.py
testing/tests/route-based/net2net-xfrmi-ike/pretest.dat
testing/tests/route-based/net2net-xfrmi-netns/hosts/sun/etc/updown
testing/tests/route-based/net2net-xfrmi-netns/pretest.dat
testing/tests/route-based/net2net-xfrmi/hosts/sun/etc/updown
testing/tests/route-based/net2net-xfrmi/pretest.dat
testing/tests/route-based/rw-shared-xfrmi/pretest.dat