[Swan-commit] Changes to ref refs/heads/master
Andrew Cagney
cagney at vault.libreswan.fi
Wed Jun 26 21:20:39 UTC 2019
New commits:
commit 6347ef4006041b388ba4c16f2f48cbfaa00a4861
Author: Andrew Cagney <cagney at gnu.org>
Date: Wed Jun 26 10:49:06 2019 -0400
testing: expect more IKEv2 log messages to include the state
Since it is being created earlier
commit 999096e25d8d894bac2b0455f95e511d398f7d7f
Author: Andrew Cagney <cagney at gnu.org>
Date: Tue Jun 25 21:07:21 2019 -0400
ikev2: create the IKE_SA_INIT responder state _before_ the state-machine
Instead of creating it in the ikev2_parent_inI1outR1() state
processor, smuggling it back via md->st.
The down side:
- if the state-machine rejects the message then a state will end up
being be created and then destroyed
The upsides:
- complete_v2_state_transition(), and the audit code with its
pexpect(st!=NULL), have a state against which they can log
- early log messages previously attributed to an IP address can now be
correctly attributed to #state
- hacks getting around a lack of a state (for instance pluto_timing
looking into the future to figure out the next so_serialno) can be
removed
More information about the Swan-commit
mailing list