[Swan-commit] Changes to ref refs/heads/main

Paul Wouters paul at vault.libreswan.fi
Tue Sep 15 02:17:33 UTC 2020


New commits:
commit cbce4975ad13ae69b35c95572995fefb529a82bc
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Sep 14 22:14:27 2020 -0400

    testing: fixup ikev2-cp-rekey-01 and add ikev2-cp-rekey-02-up-up
    
    One test case uses --up and another --up for rekey
    One test case uses --up and whack --ipsec-rekey
    
    Behaviour is slightly different. Ideally, the second --up
    command would recognise it is really supposed to be a rekey.

commit 2088806e4580d3dde09840ca342832e45ff7c67c
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Sep 14 22:03:02 2020 -0400

    IKEv2: CP payload is not required in an IPsec REKEY exchange
    
    We allowed it to be missing for STATE_V2_REKEY_CHILD_I1 but not
    for STATE_V2_NEW_CHILD_I1. The latter is generated when you
    run ipsec auto --up on an "up" connection (versus when you do
    an ipsec whack --ipsec-rekey)



More information about the Swan-commit mailing list