[Swan-commit] Changes to ref refs/heads/master

Andrew Cagney cagney at vault.libreswan.fi
Wed Jun 26 21:20:39 UTC 2019


New commits:
commit 6347ef4006041b388ba4c16f2f48cbfaa00a4861
Author: Andrew Cagney <cagney at gnu.org>
Date:   Wed Jun 26 10:49:06 2019 -0400

    testing: expect more IKEv2 log messages to include the state
    
    Since it is being created earlier

commit 999096e25d8d894bac2b0455f95e511d398f7d7f
Author: Andrew Cagney <cagney at gnu.org>
Date:   Tue Jun 25 21:07:21 2019 -0400

    ikev2: create the IKE_SA_INIT responder state _before_ the state-machine
    
    Instead of creating it in the ikev2_parent_inI1outR1() state
    processor, smuggling it back via md->st.
    
    The down side:
    
    - if the state-machine rejects the message then a state will end up
      being be created and then destroyed
    
    The upsides:
    
    - complete_v2_state_transition(), and the audit code with its
      pexpect(st!=NULL), have a state against which they can log
    
    - early log messages previously attributed to an IP address can now be
      correctly attributed to #state
    
    - hacks getting around a lack of a state (for instance pluto_timing
      looking into the future to figure out the next so_serialno) can be
      removed



More information about the Swan-commit mailing list