[Swan-commit] Changes to ref refs/heads/master
Paul Wouters
paul at vault.libreswan.fi
Sat Sep 8 19:58:15 UTC 2018
New commits:
commit d6452e39ff77ff4afeca42f08554e56f86939f8a
Author: Paul Wouters <pwouters at redhat.com>
Date: Sat Sep 8 15:47:33 2018 -0400
testing: added ikev1-psk-two-rw-id-ip-01
ensure ID_IPv4 has no regression in refine_host_connection()
commit de969e4c925a8e12ffc9ed64c27fde159e14d3a3
Author: Paul Wouters <pwouters at redhat.com>
Date: Sat Sep 8 15:39:15 2018 -0400
testing: Add ikev1-psk-dual-behind-nat-01
this test case confirms a bugfix for multiple ID_IPv4 behind the
same NAT router case for IKEv1 XAUTH.
commit f235f8b40ad65d2ddfdde73bf85469b19edf6aed
Author: Paul Wouters <pwouters at redhat.com>
Date: Sat Sep 8 15:49:52 2018 -0400
pluto: Fix refine_host_connection() for two roadwarriors using ID_IPv4 behind same NAT
This is referenced in a number of bugs:
https://github.com/libreswan/libreswan/issues/166
https://github.com/hwdsl2/setup-ipsec-vpn/issues/314
https://github.com/hwdsl2/setup-ipsec-vpn/issues/323
https://github.com/hwdsl2/setup-ipsec-vpn/issues/357
https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/62
Note that this patch only is half of the fix. The other fix is commit
9ccfe20b9a4576cc32b444 which prevents being stuck on the 0th lease when
can_share_lease() is FALSE (as it is for authby=secret)
More information about the Swan-commit
mailing list