[Swan-commit] Changes to ref refs/heads/master
Andrew Cagney
cagney at vault.libreswan.fi
Tue Aug 15 15:41:27 UTC 2017
New commits:
commit c4b85b8c56a87dc523aaec6866fd70fc297e1fdc
Merge: 6a92311 d31e6c2
Author: Andrew Cagney <cagney at gnu.org>
Date: Tue Aug 15 11:37:37 2017 -0400
ike_alg: disable IKEv1 IKE AEAD algorithms
(AES_CCM AES_GCM) so that the parser rejects them.
The parser was using IKEv1 'numbers' to identify algorithms,
even when IKEv1 didn't support the algorithm. This is fixed.
Merge commit 'd31e6c298155900cfc35bad4e7287ace22b6edfc'
commit d31e6c298155900cfc35bad4e7287ace22b6edfc
Author: Andrew Cagney <cagney at gnu.org>
Date: Wed Feb 15 13:09:51 2017 -0500
pluto: mark IKEv1 IKE AEAD entries as invalid (-1)
So all IKEv1 AEAD algorithm get rejected by the parser.
Since the parser is no longer doing the IKEv2->IKEv1->IKEv2 shuffle
these are no longer needed.
commit 2927e27605f55748f70eb2f011aea73ebeaea940
Author: Andrew Cagney <cagney at gnu.org>
Date: Mon Aug 14 20:10:33 2017 -0400
pluto: handle -ve IDs when printing status
Followup to 8aabf55ed885b76a46aa38ad6edd4f737159edf2
commit 4f9fe44fb9ada4c4a155d0f1e5bf4eb6ae196009
Author: Andrew Cagney <cagney at gnu.org>
Date: Tue Aug 15 11:28:50 2017 -0400
testing: for IKEv1 IKE, expect AEAD algorithms to be marked as invalid
More information about the Swan-commit
mailing list