Message	SHA1
Add AppOps Checks for MANAGE_IPSEC_TUNNELS ... Adds support for a new AppOp to permit services to use IpSec tunnel mode. The IpSecService now needs a context so change the service mode to a cached service rather than a static service. Bug: 66955045 Test: runtest frameworks-net Change-Id: I17a4a286225b432c3e15ea1587d946189931b4f4 Nathan Harold   commited 2018-04-03 18:23:11 +00:00	68a7edf1cb
Clarify UDP encapsulation socket API ... This change updates the getSocket() methods for IPsec to improve clarity of the return types, both for public APIs, and internal-only methods. Bug: 72473753 Test: APIs updated, CTS + unit tests ran. Merged-In: I0afebd432c5d04c47c93daa1ce616d712aa323d7 Change-Id: I0afebd432c5d04c47c93daa1ce616d712aa323d7 (cherry picked from commit 4c987ebade580d4abc8a3d549e0df90baab33140) Benedict Wong   commited 2018-03-29 23:05:42 -07:00	c165885206
Added implementation for VTI add/remove address ... This change adds implementation details for add/remove addresses onto a VTI. Bug: 73675031 Test: New tests added, passing on Walleye Merged-In: Idde9d943a5285d2c13c5c6b0f7b8a9faf718e6a5 Change-Id: Idde9d943a5285d2c13c5c6b0f7b8a9faf718e6a5 (cherry picked from commit ecc9f7cc08804e3fa15fea04ae94ea1bc74edbfe) Benedict Wong   authored and   Nathan Harold   commited 2018-03-20 16:01:27 -07:00	76df78ffbf
Make Transforms Unidirectional ... Convert the IpSecTransform from being a bi-directional pair of SAs to a unidirectional single SA. This CL also removes the concept of "direction from SAs meaning that a IpSecTransform may now be applied to a socket in either direction. -Make transforms unidirectional -Add Convert allocateSpi() to use destination rather than direction and remote address -Remove directionality from builders for IpSecTransform -Change applyTransportModeTransform() to take a direction in which to apply the transform object. -Additional minor naming updates -Restrict IpSecConfig to only print keys on eng builds -Move DIRECTION constants to IpSecManager -Add sourceAddress parameter to IpSecTransform to provide additional guarantees about the source address of data; (explicit failure rather than implicit failure). -Move SPI to the build() method of IpSecTransform Bug: 71717213 Test: runtest frameworks-net, CTS - IpSecManagerTest Change-Id: I0824b37f443f4b8c62536d9801238c63ed8f2a1c Nathan Harold   commited 2018-01-16 11:08:31 -08:00	3865a008e7
Use consistent naming for allocating SPI. ... Throughout the IPsec code (API, system server, netd) we use "reserve" SPI and "allocate" SPI interchangeably. This renames to use "allocate" everywhere for self-consistency and consistency with the kernel (ALLOCSPI). In javadoc, I am leaving the word "reserve" in several places because it is still an accurate description of how the method behaves. Bug: 69128142 Test: TreeHugger should be enough Change-Id: I8ea603b4612303b0393beef04032671fa53d2106 Jonathan Basseri   authored and   Nathan Harold   commited 2017-12-12 13:50:35 -08:00	fbe3a82340
Migrate most of core networking tests to junit4 ... This patch is a batch of mechanical changes to test classes to migrate away from AndroidTestCase and TestCase. Bug: 62918393 Test: runtest frameworks-net Change-Id: I74134609e511f22c4d9ecd65780e981f9ba7ae3f Hugo Benichi   commited 2017-10-12 15:26:09 +09:00	1c0f4e27bc
Add unit test for IpSecManager ... Test: runtest frameworks-net Bug:38259578 Change-Id: Idb76aab899ccb7145bef2b7dce36e115c25fa6ca ludi   commited 2017-07-19 18:59:12 -07:00	50c2767142