[Swan-commit] Changes to ref refs/heads/master

Andrew Cagney cagney at vault.libreswan.fi
Thu Nov 21 22:41:32 UTC 2019


New commits:
commit cc2c9a556051d5a533c6c35f3d3440a9be1f9e5e
Author: Andrew Cagney <cagney at gnu.org>
Date:   Thu Nov 21 17:23:00 2019 -0500

    ikev2 msgids: update response Message ID counters on completion of a fatal response
    
    For instance, one of the hanges in ikev2-child-restart-mismatch was
    from:
    
    - initiates messages 0 and 1: establish an IKE SA and first CHILD SA
      (westnet-eastnet-ikev2a)
    
    - initiates message 2: a CREATE_CHILD_SA for the CHILD SA
      westnet-eastnet-ikev2b; gets back authenticated TS_UNACCEPTABLE
      which is FATAL but doesn't update the response counters
    
    - tries to initiate message 3: a further CREATE_CHILD_SA for the CHILD SA
      westnet-eastnet-ikev2b but can't as, according to the initiator
      Message ID counters there's still a response outstanding



More information about the Swan-commit mailing list