The Openswan and UCI configuration file formats are very similar.
Implement the conversion from UCI to IPsec configuration file format in
the ipsec init script and store the converted information in
/etc/ipsec.uci.{conf,secrets} then reference these files from
/etc/ipsec.{conf,secrets}. This scheme allows for
backwards-compatibility during upgrades (since the original
configuration is preserved) and allows for users to implement any exotic
configurations that they require without conflicting with the
configuration in UCI.
Also add a nearly empty ipsec config file which enables nat_traversal.
This option should be safe in all configurations and is required in
many, which makes it a good default.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29585 3c298f89-4303-0410-b956-a3cf2f4a3e73
The /etc/ipsec.d directory holds the certificates and CRLs used for
IPsec, many of which may have been uploaded by users. /etc/ipsec.conf
and /etc/ipsec.secrets hold user configuration for the IPsec daemons.
Add a keep.d file to preserve these files/directories across upgrades.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29584 3c298f89-4303-0410-b956-a3cf2f4a3e73
This patch was merged upstream in commit
dd5c1a87f7032a00422135d14e1f1247b38a40c8 in Sept 2010. It is already
included in v2.6.30 and later.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29582 3c298f89-4303-0410-b956-a3cf2f4a3e73
This creates programs/loggerfix which is never used. Dump it.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29581 3c298f89-4303-0410-b956-a3cf2f4a3e73
kmod-openswan provides the KLIPS stack, included in Openswan. However,
Openswan works quite well with the in-kernel stack (NETKEY). Make
installation of KLIPS optional.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29580 3c298f89-4303-0410-b956-a3cf2f4a3e73
8 December 2011: babeld-1.3.0
* Made the route table into a sorted array, and use binary sort for
searching for routes. This makes most route operations O(log n), at
a slight cost in memory usage.
* Changed the update sending strategy to use buffers large enough for
a full update. This makes the duplicate suppression mechanism
effective in large networks, at a small cost in memory usage.
* Rate-limit the reaction to wildcard requests. This avoids an update
storm at boot in large networks.
* Fixed a bug that prevented usage of the "default" keyword in
configuration files.
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29512 3c298f89-4303-0410-b956-a3cf2f4a3e73
8 December 2011: ahcpd 0.53
* Fixed a longstanding bug that would cause a client to immediately
deconfigure itself after successfully renewing a lease.
* Set AHCP packets' TOS field as network control (thanks to Dave Taht).
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29511 3c298f89-4303-0410-b956-a3cf2f4a3e73
- resolve ipv4 and ipv6 addresses of logical interface names and add them to the interfaces line
- make charset uci-configurable and default to UTF-8
- cleanup init script, annotate uci configuration
git-svn-id: svn://svn.openwrt.org/openwrt/packages@29505 3c298f89-4303-0410-b956-a3cf2f4a3e73
