[GIT PULL V2] Fixes for rekeying, Android builds, etc.
Kevin Cernekee
cernekee at gmail.com
Sun Feb 16 17:12:46 EST 2014
V1->V2:
- Added reference to Android local symbol relocation issue:
https://code.google.com/p/android/issues/detail?id=66048
- Added minor AC_CONFIG_FILES fix
- Rebase on latest upstream master
You guys might want to hold off on "Rework DTLS master secret
(re)generation" depending on what Nikos' rekeying changes wind up looking
like? The most critical fix in my commit is making sure that DTLS
re-handshakes after sending a new DTLS master key to the gateway. This
is currently a major problem on mobile since the device is constantly
disconnecting and reconnecting due to suspend/resume and network
connectivity changes. Without the fix, the client's DTLS parameters
eventually get out of sync with the server's parameters, and no data
traffic can pass.
The following changes since commit 18e0f494d1b8e571be2cf535a3fa067db894034e:
Remove Java_* wildcard from libopenconnect.map (2014-02-16 21:20:37 +0000)
are available in the git repository at:
git://github.com/cernekee/openconnect rekey-20140216
for you to fetch changes up to ebf8452d65a5410859298ac316eed3c3a9d1b4df:
Avoid deprecated AC_OUTPUT syntax (2014-02-16 13:43:25 -0800)
----------------------------------------------------------------
Kevin Cernekee (15):
Add liboath version check
http: Don't retry on user cancellation
cstp_reconnect: Don't sleep if the user terminated the connection
android: Add android/ directory to release tarballs
android: Explicitly disable symbol versioning
android: Use make-standalone-toolchain.sh from NDK
android: Install stripped binaries under $(TRIPLET)/out
cstp: Make sure outbound packets are sent over CSTP if DTLS is down
dtls: Set rekey_method correctly if the header is missing
Sanity-check CSTP and DTLS rekey times
cstp: Rework DTLS master secret (re)generation
mainloop: Use consistent logic for rekey timeout check
mainloop: Simplify the keepalive functions
dtls: Fix link error on !HAVE_DTLS builds
Avoid deprecated AC_OUTPUT syntax
Makefile.am | 3 ++-
android/Makefile | 73 ++++++++++++++++++++++++++++++++----------------------
configure.ac | 17 ++++++++++---
cstp.c | 42 ++++++++++++++++++++++++-------
dtls.c | 9 +++++++
http.c | 2 ++
main.c | 2 +-
mainloop.c | 71 +++++++++++++++++++---------------------------------
ssl.c | 6 ++---
9 files changed, 133 insertions(+), 92 deletions(-)
--
1.7.9.5
More information about the openconnect-devel
mailing list