[Swan-commit] Changes to ref refs/heads/master

Paul Wouters paul at vault.libreswan.fi
Sat Sep 8 19:58:15 UTC 2018


New commits:
commit d6452e39ff77ff4afeca42f08554e56f86939f8a
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Sep 8 15:47:33 2018 -0400

    testing: added ikev1-psk-two-rw-id-ip-01
    
    ensure ID_IPv4 has no regression in refine_host_connection()

commit de969e4c925a8e12ffc9ed64c27fde159e14d3a3
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Sep 8 15:39:15 2018 -0400

    testing: Add ikev1-psk-dual-behind-nat-01
    
    this test case confirms a bugfix for multiple ID_IPv4 behind the
    same NAT router case for IKEv1 XAUTH.

commit f235f8b40ad65d2ddfdde73bf85469b19edf6aed
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sat Sep 8 15:49:52 2018 -0400

    pluto: Fix refine_host_connection() for two roadwarriors using ID_IPv4 behind same NAT
    
    This is referenced in a number of bugs:
    
    https://github.com/libreswan/libreswan/issues/166
    https://github.com/hwdsl2/setup-ipsec-vpn/issues/314
    https://github.com/hwdsl2/setup-ipsec-vpn/issues/323
    https://github.com/hwdsl2/setup-ipsec-vpn/issues/357
    https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/62
    
    Note that this patch only is half of the fix. The other fix is commit
    9ccfe20b9a4576cc32b444 which prevents being stuck on the 0th lease when
    can_share_lease() is FALSE (as it is for authby=secret)



More information about the Swan-commit mailing list