[Swan-commit] Changes to ref refs/heads/master
Andrew Cagney
cagney at vault.libreswan.fi
Thu Nov 21 22:41:32 UTC 2019
New commits:
commit cc2c9a556051d5a533c6c35f3d3440a9be1f9e5e
Author: Andrew Cagney <cagney at gnu.org>
Date: Thu Nov 21 17:23:00 2019 -0500
ikev2 msgids: update response Message ID counters on completion of a fatal response
For instance, one of the hanges in ikev2-child-restart-mismatch was
from:
- initiates messages 0 and 1: establish an IKE SA and first CHILD SA
(westnet-eastnet-ikev2a)
- initiates message 2: a CREATE_CHILD_SA for the CHILD SA
westnet-eastnet-ikev2b; gets back authenticated TS_UNACCEPTABLE
which is FATAL but doesn't update the response counters
- tries to initiate message 3: a further CREATE_CHILD_SA for the CHILD SA
westnet-eastnet-ikev2b but can't as, according to the initiator
Message ID counters there's still a response outstanding
More information about the Swan-commit
mailing list