[Swan-commit] Changes to ref refs/heads/master

Andrew Cagney cagney at vault.libreswan.fi
Thu Jan 10 15:06:10 UTC 2019


New commits:
commit ade763b72213b3339d3f834b8dda837677cf70d3
Author: Andrew Cagney <cagney at gnu.org>
Date:   Thu Dec 13 11:03:23 2018 -0500

    ikev2: add debug-logging to diagnose state lookups for a response
    
    Why is the exchange type needed?  Surely state machine will figure out
    if the state X exchange is valid?
    
    Lets find out.
    
    Why is a CHILD SA specific and then an IKE SA specific lookup
    needed?  Surely a Message ID uniquely identifies the IKE or CHILD that
    sent the request?
    
    Lets find out.
    
    What happens when a duplicate response is received?  For instance, IKE
    SAs send requests with no state change.  Unless the state's Message ID
    is being thwacked, it will match and, potentially cause a
    re-processing of the state.  Perhaps that is why the IX parameter is
    needed?
    
    Lets find out.



More information about the Swan-commit mailing list