[Swan-commit] Changes to ref refs/heads/master

Paul Wouters paul at vault.libreswan.fi
Thu Jan 30 09:10:09 UTC 2020


New commits:
commit 4eeb1a5a4d97c6d2ea379696ea891dd02cc73cca
Author: Vukasin Karadzic <vukasin.karadzic at gmail.com>
Date:   Thu Jan 30 10:06:05 2020 +0100

    IKEv2: fix PPK code that wasn't following RFC draft
    
    the situation was the following:
    On responder side the peer (responder) didn't find a suitable PPK
    but he was configured to use PPK (ppk=insist). This happens in IKE_AUTH exchange.
    Instead of sending AUTHENTICATION_FAILED back, the responder silently failed.
    
    See bottom of page 9 of draft-ietf-ipsecme-qr-ikev2-11.
    
    Update the console output in one affected test.
    
    Signed-off-by: Paul Wouters <pwouters at redhat.com>

commit b5954c3cf84ef5c13c24b81999d664ea5fe55e8e
Author: Vukasin Karadzic <vukasin.karadzic at gmail.com>
Date:   Thu Jan 30 10:04:14 2020 +0100

    testing: tweak and simplify some of PPK tests
    
    Signed-off-by: Paul Wouters <pwouters at redhat.com>

commit dadf8b35ab518cb353588f10885f0666606799c0
Author: Paul Wouters <pwouters at redhat.com>
Date:   Thu Jan 30 10:09:21 2020 +0100

    pluto: conn_by_name() had dropped a parameter
    
    follow up of e72094ea5



More information about the Swan-commit mailing list