[Swan-commit] Changes to ref refs/heads/master

Paul Wouters paul at vault.libreswan.fi
Mon Jan 22 14:59:47 UTC 2018


New commits:
commit fe37c9d5a901644871105491a5a10c016c2131f1
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Jan 22 09:59:13 2018 -0500

    testing: various minor fixups

commit 51522d387b4f5f2711c6deb6a2b492a134f22926
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Jan 22 09:58:45 2018 -0500

    testing: interop-ikev2-strongswan-32-ip-lease was missing leftsubnet for narrowing

commit 2ef90fede8ad1c0cf6af8ba28258ad3aefc4d77d
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Jan 22 09:58:31 2018 -0500

    testing: mark interop-ikev2-strongswan-32-ip-lease as good - it was fixed

commit 790d229a18c7647f3f5d0c21c75ee45d8f8bf2ea
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Jan 22 09:58:05 2018 -0500

    testing: enumcheck got flipped (possibly by me?)

commit 335337317c05b4aae15f2b75b0e4f63a580fc44e
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Jan 21 22:46:39 2018 -0500

    testing; leak fixed in ikev2-ppk-static-05-insist-nokey-insist-fail

commit e8c74bfd04eeb0706afada918918163f6d7e7f97
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Jan 21 22:30:43 2018 -0500

    testing: interop-ikev2-strongswan-22-cp-responder-psk add leftsubnet=0.0.0.0/0
    
    this is needed otherwise the remote cannot narrow down to its addresspool
    IP address because the initiator would be using its /32
    
    Test shows some weirdness because even though strongswan as responder is
    supposed to accept modp2048 from its config, it somehow decides to prefer
    dh19 and sends INVALID_KE. This is a strongswan bug, details logged in
    description.txt

commit 50ea83776a6925e5843bd8225e240720ee967d4c
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Jan 21 21:28:47 2018 -0500

    testing: fixup ikev2-ppk-static-09-no_ppk-initiator



More information about the Swan-commit mailing list