[Swan-commit] ***UNCHECKED*** Changes to ref refs/heads/master
Paul Wouters
paul at vault.libreswan.fi
Mon Jan 8 06:03:48 UTC 2018
New commits:
commit fff18aea00690fe21e8d8dcb077baa382604e97b
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Jan 8 01:03:21 2018 -0500
updated changes
commit 8b449d14554f7ff709570405f22169c1d4b418e9
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Jan 8 00:45:24 2018 -0500
IKEv2: Add support for modecfgdns= and modecfgdomains=
This adds support for INTERNAL_IP4_DNS and INTERNAL_IP6_DNS
and passes these options to updown similar to IKEv1, so that
resolv.conf or the running unbound DNS server are updated.
This adds support for INTERNAL_DNS_DOMAIN as defined by
draft-ietf-ipsecme-split-dns-03
It does not yet add suppor tfor INTERNAL_DNSSEC_TA.
Note this renames the option modecfgdns1= and modecfgdns2= to
modecfgdns= and modecfgdomain= to modecfgdomains=
The new options take a comma or space seperated list.
The old config options are retained as aliases. This does have the
effect that modecfgdns2= overwrites modecfgdns1= as only the last
option is actually stored in modecfgdns=
This also moves the received DNS / DOMAIN / BANNER options from
struct connection to struct state where it belongs.
commit 2019d8844357e1a605de6a6e51b0218dccbac8a7
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Jan 8 00:43:40 2018 -0500
testing: update testcases for modecfg update
modecfgdns1= and modecfgdns2= are now modecfgdns=
modecfgdomain= is now modecfgdomains
commit 39904d1a3c5ead500109c58c48fdc770e8679744
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Jan 8 00:37:31 2018 -0500
testing: added ikev2-cp-01-resolvconf to TESTLIST
commit 3d0532de3d89aee8cbb5107b77de54f5a8126886
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Jan 8 00:37:21 2018 -0500
testing: added ikev2-cp-01-resolvconf
More information about the Swan-commit
mailing list