[Swan-commit] Changes to ref refs/heads/master

Andrew Cagney cagney at vault.libreswan.fi
Tue Aug 15 15:41:27 UTC 2017


New commits:
commit c4b85b8c56a87dc523aaec6866fd70fc297e1fdc
Merge: 6a92311 d31e6c2
Author: Andrew Cagney <cagney at gnu.org>
Date:   Tue Aug 15 11:37:37 2017 -0400

    ike_alg: disable IKEv1 IKE AEAD algorithms
    
    (AES_CCM AES_GCM) so that the parser rejects them.
    
    The parser was using IKEv1 'numbers' to identify algorithms,
    even when IKEv1 didn't support the algorithm.  This is fixed.
    
    Merge commit 'd31e6c298155900cfc35bad4e7287ace22b6edfc'

commit d31e6c298155900cfc35bad4e7287ace22b6edfc
Author: Andrew Cagney <cagney at gnu.org>
Date:   Wed Feb 15 13:09:51 2017 -0500

    pluto: mark IKEv1 IKE AEAD entries as invalid (-1)
    
    So all IKEv1 AEAD algorithm get rejected by the parser.
    
    Since the parser is no longer doing the IKEv2->IKEv1->IKEv2 shuffle
    these are no longer needed.

commit 2927e27605f55748f70eb2f011aea73ebeaea940
Author: Andrew Cagney <cagney at gnu.org>
Date:   Mon Aug 14 20:10:33 2017 -0400

    pluto: handle -ve IDs when printing status
    
    Followup to 8aabf55ed885b76a46aa38ad6edd4f737159edf2

commit 4f9fe44fb9ada4c4a155d0f1e5bf4eb6ae196009
Author: Andrew Cagney <cagney at gnu.org>
Date:   Tue Aug 15 11:28:50 2017 -0400

    testing: for IKEv1 IKE, expect AEAD algorithms to be marked as invalid



More information about the Swan-commit mailing list