Martin Willi
19cb07b890
automake: replace INCLUDES by AM_CPPFLAGS
...
INCLUDES are now deprecated and throw warnings when using automake 1.13.
We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and
defines are passed to AM_CPPFLAGS only.
2013-07-18 14:59:19 +02:00
Tobias Brunner
79b6ead1e4
unity: Replicate default behavior if no UNITY_SPLIT_INCLUDE attributes were received
2013-07-17 18:23:57 +02:00
Tobias Brunner
56b0fac8c9
unity: Allow UNITY_LOCAL_LAN to be longer than 8 bytes
2013-07-17 18:23:57 +02:00
Tobias Brunner
c7d0b80abb
unity: Fix memory leak in provider
2013-07-17 18:23:57 +02:00
Tobias Brunner
819cb66298
unity: Use plugin features to register listener and attribute handler/provider
2013-06-11 11:18:19 +02:00
Tobias Brunner
14edee56bf
unity: Check IKE_SA in only after enumerating virtual IPs
2013-04-05 16:03:10 +02:00
Martin Willi
ec1b4e6638
Merge branch 'vip-shunts'
...
Installs bypass policies for the physical address if a virtual address is
assigned, and installs a proper source route to actually use the physical
address for bypassed destinations.
Conflicts:
src/libcharon/plugins/unity/unity_handler.c
2013-03-01 11:30:13 +01:00
Martin Willi
a1db77de7c
Use a complete port range in traffic_selector_create_from_{subnet,cidr}
2013-02-21 11:52:33 +01:00
Martin Willi
122b4b6e6d
Include local address for Unity Split-Exclude shunt policies
...
If we use a virtual IP, having a shunt policy for just that wouldn't work, as
we want a shunt bypass using the local address.
2013-02-20 16:15:39 +01:00
Martin Willi
325efdaca8
Filter TS list for Split-Includes before printing them to debug log
2013-01-21 12:15:51 +01:00
Tobias Brunner
ef33a4ab82
Fixed some typos, courtesy of codespell
2012-12-20 09:35:26 +01:00
Martin Willi
b5d27839ad
Do not send 0.0.0.0/0 traffic selectors as Split-Include Unity attributes
...
It seems that iOS devices don't like them.
2012-11-22 12:13:44 +01:00
Tobias Brunner
531f32d62a
Compiler warning fixed
2012-11-02 15:39:51 +01:00
Martin Willi
6e8f88dba3
Exclude dynamic TS from Unity Split-Include attributes
2012-10-30 09:14:44 +01:00
Tobias Brunner
12642a6831
Moved data structures to new collections subfolder
2012-10-24 16:00:49 +02:00
Martin Willi
77c37ea5e0
As Unity responder, don't change the proposed TS at all, racoon doesn't like that
2012-09-18 17:17:48 +02:00
Martin Willi
7a7deec283
As initiator, narrow received Unity attributes to configured TS
2012-09-18 17:17:48 +02:00
Martin Willi
b8db3775f3
When using Unity, bump up remote TS as initiator to 0.0.0.0/0, too
2012-09-18 17:17:48 +02:00
Martin Willi
284ed1b352
Enable Cisco Unity only if Unity vendor id received
2012-09-18 17:17:48 +02:00
Martin Willi
6e60807637
Exchange 0.0.0.0/0 traffic selectors with Unity, narrowing after exchange
2012-09-18 17:17:48 +02:00
Martin Willi
f2463f1bd6
Add a Unity attribute provider that adds Split-Includes for TS
2012-09-18 17:17:47 +02:00
Martin Willi
e39e697429
Check if subset calculation actually yields a TS in Unity narrowing
2012-09-18 17:17:47 +02:00
Martin Willi
92b5066705
Request Unity configuration attributes for IKEv1 only
2012-09-18 17:17:47 +02:00
Martin Willi
5ff012f717
Add Cisco Unity client support for Split-Include and Local-LAN
2012-09-18 17:17:47 +02:00