[Swan-commit] Changes to ref refs/heads/master
cagney at vault.libreswan.fi
Thu Nov 28 19:51:39 UTC 2019
Author: Andrew Cagney <cagney at gnu.org>
Date: Thu Nov 28 14:40:12 2019 -0500
ikev2: in the IKE rekey initiator, use the new IKE SPIs
Fixes regresion in b61ff9fa8af253769c4b60f9364c0746de81a687
which switched things so that the old IKE SPIs were used leaving
the IKE rekey initiator with wrong keys. The first exchange post
rekey would then fail.
The test ikev2-ike-rekey-01 did show a regresssion of sorts - the
state numbers all changed. It would be nice to have a test that
used whack commands to explicitly: establish IKE, trigger a rekey,
and then trigger liveness.
Found by Toumo Soini.
More information about the Swan-commit