[Swan-commit] Changes to ref refs/heads/master
Tuomo Soini
tis at vault.libreswan.fi
Tue Nov 22 21:14:49 UTC 2016
New commits:
commit cc2a8ceb37528013bb132491f21663b6067b18d0
Author: Antony Antony <antony at phenome.org>
Date: Thu Oct 20 06:21:27 2016 +0200
ikev1: when a delete arrives for an IPSec SA scheudle REPLACE immediately.
Now schedule a REPLACE immediately.
If a parrent/ISKAMP delete arrive following this the delete of child
A first Quick mode attempt will fail and create
a new parent/child be established.
Previously a REPLACE event was scheduled after DELETE_SA_DELAY (60s).
Signed-off-by: Tuomo Soini <tis at foobar.fi>
commit 7edb44bb7af3254778a0ecb1cb55aa797b459ebd
Author: Antony Antony <antony at phenome.org>
Date: Sat Nov 19 19:17:21 2016 +0100
ikev2: when a delete arrives for an IPSec SA either expire/expire/delete.
Instead of just deleting check if it need to be replaced or
expired. If replace such as auto=start. Replace it with st_margin=0
which will replace and expire immediately.
If the SA's next event is EXPIRE just expire immediately.
Otherwise delete the state/SA.
Signed-off-by: Tuomo Soini <tis at foobar.fi>
More information about the Swan-commit
mailing list