|
From: <orl...@us...> - 2012-10-11 22:11:53
|
Revision: 245
http://openhip.svn.sourceforge.net/openhip/?rev=245&view=rev
Author: orliebrewer
Date: 2012-10-11 22:11:47 +0000 (Thu, 11 Oct 2012)
Log Message:
-----------
Added code to send an ICMP packet of type "Parameter Problem" in
response to an ESP packet with an unknown SPI as per RFC 5202.
A HIP process receiving an ICMP packet of type "Parameter Problem"
for a HIP association will send a HIP address check UPDATE to its
peer for that HIP assoication. If there is no response, that HIP
association will be deleted. If the UPDATE is successful, HIP will
ignore future ICMP packets for that HIP assoication for a configurable
amount of time. The icmp_timeout tag in the hip.conf controls this
behavior. If not present or set to a value of zero, no ICMP packets
will be sent or responded to. If set to a value greater than zero,
HIP will send and respond to ICMP packets as described above and
will ignore future ICMP packets for that number of seconds after
a successful address check UPDATE exchange.
Modified Paths:
--------------
hip/trunk/src/include/hip/hip_types.h
hip/trunk/src/linux/hip_linux_umh.c
hip/trunk/src/protocol/hip_input.c
hip/trunk/src/protocol/hip_main.c
hip/trunk/src/usermode/hip_esp.c
hip/trunk/src/util/hip_util.c
hip/trunk/src/util/hip_xml.c
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|