[Swan-commit] Changes to ref refs/heads/master
Paul Wouters
paul at vault.libreswan.fi
Sun Jun 23 18:21:53 UTC 2019
New commits:
commit 31b372dcfd2b01d1a23d61a135ce0d712598ab3d
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Jun 23 14:21:15 2019 -0400
pluto: include ip_address.h in linux_audit.c
fixup for 288943d0de7 that introduced jam_address()
commit 1eee66e66e4101462f4f9fcb406e1803455558a8
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Jun 23 14:19:14 2019 -0400
documentation: update CHANGES
commit 4b5c4b4f3ae8a3c9207884094e40539b942e64a4
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Jun 23 14:17:53 2019 -0400
testing: update TESTLIST
commit 187ae972915f211211df416731770a1e61a9af0f
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Jun 23 14:16:46 2019 -0400
testing: update and extend the linux audit tests
commit 74ac0b12b4484e5024723e9842ce461b44e1948e
Author: Paul Wouters <pwouters at redhat.com>
Date: Sun Jun 23 14:14:55 2019 -0400
pluto: redo audit logging. Centralize is better.
This did uncover limitations in the state machine where esepecially
for IKEv1, failures do not cause a state change where we can hook
in the failure logging.
Additionally, in IKEv2, a child SA failure leads to a parent SA
failure, where instead we should complete and keep the IKE SA and
only fail the child sa.
commit a284e3d8c4c02c21a16061658574350eb04d4a7a
Author: Paul Wouters <pwouters at redhat.com>
Date: Fri Jun 21 10:45:35 2019 -0400
testing: updates tests for removal of DH2/MODP1024 support.
commit 8fcbbc742cc8146fe9a1411ebb4e6c575cec7bd4
Author: Paul Wouters <pwouters at redhat.com>
Date: Fri Jun 21 10:44:36 2019 -0400
building: Disable DiffieHellman Group 2 (DH2, MODP1024) by default
This conforms to RFC 8247
commit 6f113467ed8b7a9be66c7088df31c10995499115
Author: Paul Wouters <pwouters at redhat.com>
Date: Fri Jun 21 10:44:10 2019 -0400
testing: rename linux-audit-01 to linux-audit-01-ok
commit f27d8afed70c15e6c1835980a88d716e72ece75b
Author: Paul Wouters <pwouters at redhat.com>
Date: Fri Jun 21 10:42:57 2019 -0400
testing: linux-audit-01 remove fail tests
These go into linux-audit-02-fail
More information about the Swan-commit
mailing list