Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #18390 from lowjoel/strongswan-rekey-bytes-packets

Browse source 
strongswan: support child rekey by bytes and packets
This commit is contained in:
Jeffery To 2022-05-11 04:15:06 +08:00 committed by GitHub
commit 7de587566e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
net/strongswan/files/swanctl.init
View file

@ -233,6 +233,10 @@ config_child() {
local startaction local startaction
local if_id local if_id
local rekeytime local rekeytime
local rekeybytes
local lifebytes
local rekeypackets
local lifepackets
config_get startaction "$1" startaction "route" config_get startaction "$1" startaction "route"
config_get local_nat "$1" local_nat "" config_get local_nat "$1" local_nat ""
@ -247,6 +251,10 @@ config_child() {
config_get interface "$1" interface "" config_get interface "$1" interface ""
config_get hw_offload "$1" hw_offload "" config_get hw_offload "$1" hw_offload ""
config_get priority "$1" priority "" config_get priority "$1" priority ""
config_get rekeybytes "$1" rekeybytes ""
config_get lifebytes "$1" lifebytes ""
config_get rekeypackets "$1" rekeypackets ""
config_get lifepackets "$1" lifepackets ""
config_list_foreach "$1" local_subnet append_var local_subnet "," config_list_foreach "$1" local_subnet append_var local_subnet ","
config_list_foreach "$1" remote_subnet append_var remote_subnet "," config_list_foreach "$1" remote_subnet append_var remote_subnet ","
@ -339,6 +347,18 @@ config_child() {
swanctl_xappend4 "life_time = $(seconds2time $(((110 * $(time2seconds $rekeytime)) / 100)))" swanctl_xappend4 "life_time = $(seconds2time $(((110 * $(time2seconds $rekeytime)) / 100)))"
fi fi
[ -n "$rekeytime" ] && swanctl_xappend4 "rekey_time = $rekeytime" [ -n "$rekeytime" ] && swanctl_xappend4 "rekey_time = $rekeytime"
if [ -n "$lifebytes" ]; then
swanctl_xappend4 "life_bytes = $lifebytes"
elif [ -n "$rekeybytes" ]; then
swanctl_xappend4 "life_bytes = $(((110 * rekeybytes) / 100))"
fi
[ -n "$rekeybytes" ] && swanctl_xappend4 "rekey_bytes = $rekeybytes"
if [ -n "$lifepackets" ]; then
swanctl_xappend4 "life_packets = $lifepackets"
elif [ -n "$rekeypackets" ]; then
swanctl_xappend4 "life_packets = $(((110 * rekeypackets) / 100))"
fi
[ -n "$rekeypackets" ] && swanctl_xappend4 "rekey_packets = $rekeypackets"
[ -n "$inactivity" ] && swanctl_xappend4 "inactivity = $inactivity" [ -n "$inactivity" ] && swanctl_xappend4 "inactivity = $inactivity"
[ -n "$updown" ] && swanctl_xappend4 "updown = $updown" [ -n "$updown" ] && swanctl_xappend4 "updown = $updown"