[Swan-commit] Changes to ref refs/heads/fragmentation
Paul Wouters
paul at vault.libreswan.fi
Thu Jan 31 07:06:13 EET 2013
New commits:
commit 916d033154971eec2774913b70c5cf6b443e0bf7
Author: Paul Wouters <pwouters at redhat.com>
Date: Wed Jan 30 22:39:03 2013 -0500
* fragmentation: when we cannot access the md, pretend we sent it.
That way, on the next retry we have access to st->st_suspended_md
commit f301123d377c3eb0252b31498466349d40c8dd87
Author: Paul Wouters <pwouters at redhat.com>
Date: Wed Jan 30 22:33:50 2013 -0500
* testing: added more x509-pluto-frag-0* tests
x509-pluto-frag-00 is used to confirm filtering UDP fragments
will cause problems. Both ends have ike_frag=no
x509-pluto-frag-01 is using the default policy of ike_frag=yes that
should send/receive ike fragments by both west and east.
x509-pluto-frag-02 uses ike_frag=force on west and ike_frag=yes on
east, so it should send out MAIN_I3 in fragments on the first go.
x509-pluto-frag-04 has ike_frag=yes on west, and ike_frag=no on
east, so west will not see the VID and should not send fragments.
commit c959ed4f730d22d6f05d15682c6e2315391eeba8
Author: Paul Wouters <pwouters at redhat.com>
Date: Wed Jan 30 22:30:33 2013 -0500
* testing: added more x509-pluto-frag-0* tests
x509-pluto-frag-00 is used to confirm filtering UDP fragments
will cause problems.
x509-pluto-frag-01 is the default policy that should send/receive
ike fragments
x509-pluto-frag-02 uses ike_frag=force
More information about the Swan-commit
mailing list