[Swan-commit] Changes to ref refs/heads/main

Andrew Cagney cagney at vault.libreswan.fi
Mon Sep 7 21:29:35 UTC 2020


New commits:
commit f22ca063af1bece186346f1fdf02514ae089035c
Author: Andrew Cagney <cagney at gnu.org>
Date:   Mon Sep 7 17:27:37 2020 -0400

    testing: review and update ikev2-03-basic-rawrsa-ckaid
    
    Querks when specifying the CKAID of a raw RSA key in a basic IKEv2 connection.
    
    Connections involving rsasigkey are performed using two whack messages
    which:
    
    1. add the connection _without_ the raw key
    2. add the raw key
    
    This breaks "ipsec auto --add east-ckaid-rsasigkey":
    
    - the first whack message tries to add the connection; since it
      specifies ..ckaid=..., but rsasigkey hasn't yet been added, it fails
    
    But there's a work-around:
    
    1. "ipsec auto --add east-rsasigkey"
    
       this adds east'ts rsasigkey to the database
    
    2. "ipsec auto --add east-ckaid"
    
       loads because the command above loaded the RSASIGKEY



More information about the Swan-commit mailing list