[Swan-commit] Changes to ref refs/heads/master
Paul Wouters
paul at vault.libreswan.fi
Mon Jan 22 14:59:47 UTC 2018
New commits:
commit fe37c9d5a901644871105491a5a10c016c2131f1
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Jan 22 09:59:13 2018 -0500
testing: various minor fixups
commit 51522d387b4f5f2711c6deb6a2b492a134f22926
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Jan 22 09:58:45 2018 -0500
testing: interop-ikev2-strongswan-32-ip-lease was missing leftsubnet for narrowing
commit 2ef90fede8ad1c0cf6af8ba28258ad3aefc4d77d
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Jan 22 09:58:31 2018 -0500
testing: mark interop-ikev2-strongswan-32-ip-lease as good - it was fixed
commit 790d229a18c7647f3f5d0c21c75ee45d8f8bf2ea
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Jan 22 09:58:05 2018 -0500
testing: enumcheck got flipped (possibly by me?)
commit 335337317c05b4aae15f2b75b0e4f63a580fc44e
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Jan 21 22:46:39 2018 -0500
testing; leak fixed in ikev2-ppk-static-05-insist-nokey-insist-fail
commit e8c74bfd04eeb0706afada918918163f6d7e7f97
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Jan 21 22:30:43 2018 -0500
testing: interop-ikev2-strongswan-22-cp-responder-psk add leftsubnet=0.0.0.0/0
this is needed otherwise the remote cannot narrow down to its addresspool
IP address because the initiator would be using its /32
Test shows some weirdness because even though strongswan as responder is
supposed to accept modp2048 from its config, it somehow decides to prefer
dh19 and sends INVALID_KE. This is a strongswan bug, details logged in
description.txt
commit 50ea83776a6925e5843bd8225e240720ee967d4c
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Jan 21 21:28:47 2018 -0500
testing: fixup ikev2-ppk-static-09-no_ppk-initiator
More information about the Swan-commit
mailing list