[Swan-commit] Changes to ref refs/heads/fragmentation

Paul Wouters paul at vault.libreswan.fi
Thu Jan 31 07:06:13 EET 2013


New commits:
commit 916d033154971eec2774913b70c5cf6b443e0bf7
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed Jan 30 22:39:03 2013 -0500

    * fragmentation: when we cannot access the md, pretend we sent it.
    
    That way, on the next retry we have access to st->st_suspended_md

commit f301123d377c3eb0252b31498466349d40c8dd87
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed Jan 30 22:33:50 2013 -0500

    * testing: added more x509-pluto-frag-0* tests
    
    x509-pluto-frag-00 is used to confirm filtering UDP fragments
    will cause problems. Both ends have ike_frag=no
    
    x509-pluto-frag-01 is using the default policy of ike_frag=yes that
    should send/receive ike fragments by both west and east.
    
    x509-pluto-frag-02 uses ike_frag=force on west and ike_frag=yes on
    east, so it should send out MAIN_I3 in fragments on the first go.
    
    x509-pluto-frag-04 has ike_frag=yes on west, and ike_frag=no on
    east, so west will not see the VID and should not send fragments.

commit c959ed4f730d22d6f05d15682c6e2315391eeba8
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed Jan 30 22:30:33 2013 -0500

    * testing: added more x509-pluto-frag-0* tests
    
    x509-pluto-frag-00 is used to confirm filtering UDP fragments
    will cause problems.
    
    x509-pluto-frag-01 is the default policy that should send/receive
    ike fragments
    
    x509-pluto-frag-02 uses ike_frag=force



More information about the Swan-commit mailing list