[Swan-commit] Changes to ref refs/heads/main

Paul Wouters paul at vault.libreswan.fi
Mon Sep 14 21:01:52 UTC 2020


New commits:
commit 95ec4b7bede9579f0e51ca9d5d268953626e519e
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Sep 14 17:01:14 2020 -0400

    documentation: updated CHANGES

commit ffa30a969467058a7c5695a587938610b138109d
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Sep 14 16:59:34 2020 -0400

    testing: ikev2-04-basic-x509 add ipsec-interface=no
    
    Just to keep testing that no does not set if_id 0

commit 78253c41f6200f2f505e14775cdbaca3b40ae5c8
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Sep 14 16:58:19 2020 -0400

    testing: update ikev2-xfrmi-02 to use ipsec0

commit 231feaf8faafc9caffffd6669d090db51749f7f8
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Sep 14 16:49:43 2020 -0400

    XFRM: Add ipsec0 support by mapping it onto if_d 16384
    
    This requires ipsec-interface= to take 0 as valid argument,
    so we use UINT32_MAX to mean "no" in the parser.
    
    When setting up the XFRM interface, if we encounter if_id 0,
    we map it to 16384, but once we make a name we will use "ipsec0"
    instead of "ipsec16384".
    
    whack support was also still missing, so whack support was added
    with the same mapping.
    
    This is documented in a man page update.

commit 81843e2d30873cb288f9a30ede78614dc747cf33
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Sep 14 16:48:45 2020 -0400

    whack: Remove obsolete --tundev MAST support



More information about the Swan-commit mailing list