[Swan-commit] Changes to ref refs/heads/master
Andrew Cagney
cagney at vault.libreswan.fi
Thu Jan 10 15:06:10 UTC 2019
New commits:
commit ade763b72213b3339d3f834b8dda837677cf70d3
Author: Andrew Cagney <cagney at gnu.org>
Date: Thu Dec 13 11:03:23 2018 -0500
ikev2: add debug-logging to diagnose state lookups for a response
Why is the exchange type needed? Surely state machine will figure out
if the state X exchange is valid?
Lets find out.
Why is a CHILD SA specific and then an IKE SA specific lookup
needed? Surely a Message ID uniquely identifies the IKE or CHILD that
sent the request?
Lets find out.
What happens when a duplicate response is received? For instance, IKE
SAs send requests with no state change. Unless the state's Message ID
is being thwacked, it will match and, potentially cause a
re-processing of the state. Perhaps that is why the IX parameter is
needed?
Lets find out.
More information about the Swan-commit
mailing list