[Swan-commit] Changes to ref refs/heads/master

Paul Wouters paul at vault.libreswan.fi
Wed Dec 16 05:25:48 UTC 2015


New commits:
commit 15f3a5b075145b928b5dfb62af33a0f12cb74b4c
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed Dec 16 00:23:14 2015 -0500

    pluto: initialise phase2 our_lastused/peer_lastused on creation
    
    Otherwise, get_sa_info() interprets a 0 and conclude the IPsec SA
    has been idle since 1970 and can be torn down.
    
    These lastused counters were updated only when there had been
    traffic on the SA since the last check, so this would fail
    specifically for 1 packet triggers which are eaten by the
    acquire, leaving the IPse SA on 0 bytes and thus the lastused
    parameters never got set.



More information about the Swan-commit mailing list