[Swan-commit] Changes to ref refs/heads/master
Paul Wouters
paul at vault.libreswan.fi
Sun Aug 4 21:41:12 UTC 2019
New commits:
commit 8bb225798220221396d63cb039d0f3dbb7fb739e
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Aug 4 16:57:57 2019 -0400
pluto: Support for rightid=%any without matching SAN for IKE ID
In add_connection(), remember when we have an id=%any entry, since
we forgot when we replaced the %any ID with our ID_IP from our IP
address.
Later when subjectAltName (SAN) checks happen, we can ignore a mismatch
of IKE ID and SAN if configured with rightid=%any
commit 1aff700e7e1f9607ef3c0ac99eec4098523a0b2d
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Aug 4 16:57:15 2019 -0400
testing: add generating certs without SAN to dist_certs.py
commit 87dd5e20635b0be3424d776649e0a2fe0ea7b009
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Aug 4 16:56:46 2019 -0400
testing: add ikev2-x509-32-id-any to TESTLIST
commit adff91c315d05140b29a5fb79da7abe02d8d6039
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Aug 4 16:55:49 2019 -0400
testing: added ikev2-x509-32-id-any to test rightid=%any
This allows the SAN to not be present or not match at all.
commit 7822a4463fc807d240db6e0e73eecf1113bdd69c
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Aug 4 16:37:37 2019 -0400
pluto: rename a variable ipstr to iptxt to avoid confusion with ipstr() function.
More information about the Swan-commit
mailing list