New commits: commit a648bd28b3a2d1cdb1ce58d88c6b05aad59f4fd8 Author: Andrew Cagney <cagney at gnu.org> Date: Tue Dec 10 19:33:56 2019 -0500 ikev2: only update the IKE SA initiator's SPIr (from responder) after DH has completed As this is the point of no return. Same for NAT flags.