[Swan-commit] Changes to ref refs/heads/master

Andrew Cagney cagney at vault.libreswan.fi
Thu Nov 29 15:44:03 UTC 2018


New commits:
commit 9d3e72bf2f6d96e821c29e59b5c57201c35d0c96
Author: Andrew Cagney <cagney at gnu.org>
Date:   Wed Nov 28 16:06:06 2018 -0500

    ikev2: delete ineffective code trying to trigger a CHILD SA re-key after an IKE SA replace/re-key
    
    The code was searching the entire state DB for CHILD SA's having the
    the replaced (old) IKE SA's .st_clonedfrom serial no.
    
    Problem #1 re-key: since the code migrating CHILD SA's to the new IKE
    SA updated .st_clonedfrom, the test will always fail.
    
    Problem #2 replace: since the old IKE SA, and all CHILD SAs were
    delted, there's nothing to find.



More information about the Swan-commit mailing list