[Swan-commit] Changes to ref refs/heads/master

Andrew Cagney cagney at vault.libreswan.fi
Wed Nov 7 14:01:33 UTC 2018


New commits:
commit 4948da023aefe079824f96fc48fc526b326fd27c
Author: Andrew Cagney <cagney at gnu.org>
Date:   Wed Nov 7 08:09:28 2018 -0500

    IKEv2 TS: change match_address_range() to to compare <=/>= depending on initiator / responder
    
    For the responder this flips END_WIDER_THAN_TS to END_NARROWER_THAN_TS
    when comparing addresses.  No new failures which would suggest
    this case isn't covered?
    
    It is eventually going to need to compute the intersection so that
    it can match the first TS pair better.
    
    (the more useful thing is the addition of ip_subnet_floor() and
    ip_subnet_ceiling() for doing the comparisons against an ip_range).



More information about the Swan-commit mailing list