[Swan-commit] Changes to ref refs/heads/master

[Paul Wouters]

New commits:
commit 4f20f86157407dba78ea4ac86d30f398ae763831
Author: Andrew Cagney <andrew.cagney at gmail.com>
Date:   Sun Jan 25 14:45:10 2015 -0500

    IKEv2: Support for AES_GCM

commit c860828d7d429adb55363c8a4aaac6cff2f47692
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Jan 25 14:43:59 2015 -0500

    testing: fixup algo reference output for GCM addition

commit e600cf926b8743ad8e457ddd9ffa9e9ce0f7e8e0
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Jan 25 14:42:59 2015 -0500

    testing: narrowing test simplification
    
    Remove full status output. allow for new retransmit message

commit 5e350effb30969c2ad28f40a85df61a99af43dff
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Jan 25 14:38:04 2015 -0500

    testing: netkey-audit-01 now also displays prf= in audit log

commit 112a1edcb16a514dcc2f2548adb8a43563cff72f
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Jan 25 14:20:52 2015 -0500

    testing: dpd-01: removal of 169 routes in reference output

commit c5c5cb1af82cb2a1e86fe2d00ac7cc562040e5d4
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Jan 25 14:14:14 2015 -0500

    testing: aggr-pluto-03 cleared referenec output copied from other test
    
    This test uses aggressive mode, and is failing

commit 447a9fd3fabc04c57204b3cdcb9d3f6899c13c69
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 15:49:09 2015 -0500

    testing: fixup gcm for netkey-pluto-0[12]

commit a73ef0b38979f9af8098cdb67d96f43ae6b115ae
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 15:47:29 2015 -0500

    testing: ipv6-transport-ts-mode-04-netkey-netkey fix nc command.
    
    The tcpdump still shows this test is not using ESP but still sends
    plaintext?

commit 4f72444dc2564bac5b96f8386f31c8951279fede
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 15:39:41 2015 -0500

    testing: fixup nat-pluto-09 - passes

commit a160f2aeeb08cc232036e842828d3d6754b1775b
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 15:36:38 2015 -0500

    testing: fixes to basic-pluto-12-netkey but unsure it is passing now
    
    it seems improved compared to the comments in description.txt but
    I'm confused the tcpdump capture does not show the port 22 attempt
    in either clear or encrypted

commit c38da9f5180b9c0da736ade8c5a3dcadbec628c7
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 15:33:11 2015 -0500

    testing: interop-ikev2-racoon-02-psk-responder  sanitizer fixup

commit 4d937182113f947394dd544c5ee361465b3c0fce
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 15:32:42 2015 -0500

    testing: racoon sanitizer needs to mask ephemeral hex blob

commit 663c86f8f3097797ba542c04352ab6a0e93d5d87
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 15:26:57 2015 -0500

    testing: dnssec-pluto-01 updated for GCM

commit f289a16081b39bd8d4cfca5183f8542013ee5fff
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 15:26:09 2015 -0500

    testing: replay-authip-01 updated for GCM

commit 9c63ddbf5ae376b9effc0bfc9fccc63e69b18fd9
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 15:22:07 2015 -0500

    testing: fixup and clarified basic-pluto-12.
    
    The test has an obscure routing isue but it _is_ correct.
    (the exclusion of a port causes it to miss the ipsec tunnel and
    therefor turns out to miss the only route to the remote network
    that goes via ipsec.

commit 3ce626c526a296b94f93007e276cdf4aff36ed17
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 15:03:06 2015 -0500

    testing: clarified and cleaned up basic-pluto-14-klips-route
    
    The packet leak should NOT happen. This is a bug. an auto=route
    connection should place a shunt in and so packets should never
    leak during negotiation!

commit 644e56636ff506f8e3604d32a174524bf62ffa1a
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 14:57:07 2015 -0500

    testing: mark algo-pluto-04 as wip - it shows a bug that needs fixing

commit 77764c5b007e9682fb244b5065f436acc0369def
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 14:53:53 2015 -0500

    testing: removed ah-pluto-06 and ah-pluto-07
    
    also tested algos the linux kernel does not support

commit 03c3c7f8fa8c90c71db59f0dffccc311221c3000
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 14:53:03 2015 -0500

    testing: removed ah-pluto-08 - it tests an unsupported kernel algo

commit 554f271b4c6a45772116caf074f7ec7899652dd2
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 14:51:24 2015 -0500

    testing: mark loopback tests WIP while pending redoing/ripping it out

commit e383244d54eebce694d105ad6b7adc0213873bd6
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 14:50:42 2015 -0500

    testing: fixup ipv6-tunnel-mode-04-rw

commit fb49f1bc017a8b9e9b183e0fea4ea63f3e711fa3
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Jan 24 14:38:12 2015 -0500

    testing: some cleanup of ipv6-tunnel-mode-03-rw
    
    test still fails - using link local instead of the v6 IPs of the
    tunnel, so no ESP packets observed in tcpdump and ICMP6 hitting
    firewall rule. Marked test as WIP

commit 7e5af2658cbf7dfe6187a42865afd3e220f41ddc
Author: Paul Wouters <pwouters at redhat.com>
Date:   Fri Jan 23 21:47:24 2015 -0500

    testing: added v6.sed sanitizer
    
    The firewall logs with ephemeral ID= entries :/

commit 11085c5c093c725b401ff673239c5a97209c5ff9
Author: Paul Wouters <pwouters at redhat.com>
Date:   Fri Jan 23 21:47:05 2015 -0500

    testing: fixup ikev2-ipv6-transport-mode-02-netkey-netkey

commit 14fa5fb30b1c29968534c5be3d8eb7e36306a828
Author: Paul Wouters <pwouters at redhat.com>
Date:   Fri Jan 23 20:58:53 2015 -0500

    testing: some fixes to interop-ikev2-racoon-04-x509-responder
    
    (still failing)

commit 8d4617377f1e37a0987835750b2b79ada8592c00
Author: Paul Wouters <pwouters at redhat.com>
Date:   Fri Jan 23 16:38:08 2015 -0500

    testing: mark interop-ikev2-strongswan-18-psk-cast as good