[Swan-commit] Changes to ref refs/heads/master

Paul Wouters paul at vault.libreswan.fi
Sun Aug 4 21:41:12 UTC 2019


New commits:
commit 8bb225798220221396d63cb039d0f3dbb7fb739e
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Aug 4 16:57:57 2019 -0400

    pluto: Support for rightid=%any without matching SAN for IKE ID
    
    In add_connection(), remember when we have an id=%any entry, since
    we forgot when we replaced the %any ID with our ID_IP from our IP
    address.
    
    Later when subjectAltName (SAN) checks happen, we can ignore a mismatch
    of IKE ID and SAN if configured with rightid=%any

commit 1aff700e7e1f9607ef3c0ac99eec4098523a0b2d
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Aug 4 16:57:15 2019 -0400

    testing: add generating certs without SAN to dist_certs.py

commit 87dd5e20635b0be3424d776649e0a2fe0ea7b009
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Aug 4 16:56:46 2019 -0400

    testing: add ikev2-x509-32-id-any to TESTLIST

commit adff91c315d05140b29a5fb79da7abe02d8d6039
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Aug 4 16:55:49 2019 -0400

    testing: added ikev2-x509-32-id-any to test rightid=%any
    
    This allows the SAN to not be present or not match at all.

commit 7822a4463fc807d240db6e0e73eecf1113bdd69c
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Aug 4 16:37:37 2019 -0400

    pluto: rename a variable ipstr to iptxt to avoid confusion with ipstr() function.



More information about the Swan-commit mailing list