[Swan-commit] Changes to ref refs/heads/master

Andrew Cagney cagney at vault.libreswan.fi
Thu Nov 29 18:43:34 UTC 2018


New commits:
commit 9cdbb0710c182c8f06bf3a4e0cd372317b95efeb
Author: Andrew Cagney <cagney at gnu.org>
Date:   Wed Nov 28 17:04:40 2018 -0500

    ikev2: hardwire timeout for inR1outI2 transition to EVENT_SA_EXPIRE in PLUTO_HALFOPEN_SA_LIFE
    
    Was calling ikev2_replace_delay() with the event
    EVENT_SA_v2_RETRANSMIT (which is intended for the child) and then,
    because PLUTO_HALFOPEN_SA_LIFE <= .sa_rekey_margin (aka
    SA_REPLACEMENT_MARGIN_DEFAULT) is pretty much always true, force the
    event to EVENT_SA_EXPIRE.
    
    Another case of IKE and CHILD SAs having a mashed together state
    transition.
    
    pexpect ikev2_replace_delay() to only be called with EVENT_SA_REPLACE.



More information about the Swan-commit mailing list