[Swan-commit] Changes to ref refs/heads/master
Andrew Cagney
cagney at vault.libreswan.fi
Fri Mar 23 00:22:09 UTC 2018
New commits:
commit 00dedd99c51a8dcb79cee4aeb9f768ef01542d82
Merge: b0d649b 93b6c3e
Author: Andrew Cagney <cagney at gnu.org>
Date: Thu Mar 22 20:19:11 2018 -0400
ikev2: when no-PFS allow esp=aes;dh100,aes
Which expands to esp=aes;dh100,aes;none
Consequence of ca6fdd60fb19ae7e96293b474da47eefbe0c6325.
Merge commit '93b6c3e6982bede5ee1701e9f0b817fae5c2699b'
commit 93b6c3e6982bede5ee1701e9f0b817fae5c2699b
Author: Andrew Cagney <cagney at gnu.org>
Date: Thu Mar 22 13:13:01 2018 -0400
algparse: try IKEv2 DH with and without PFS
commit 23e2fc1e879356074563d06e9ee1215b473e5d68
Author: Andrew Cagney <cagney at gnu.org>
Date: Fri Mar 9 20:03:54 2018 -0500
ikev2: when no-PFS, allow esp=aes,aes;dh22 in proposals
Seeing as ca6fdd60fb19ae7e96293b474da47eefbe0c6325 et.al.
got it working.
The limitation here is that IKEv2 CHILD SAs don't handle
INVALID KE.
More information about the Swan-commit
mailing list