[Swan-commit] Changes to ref refs/heads/main
Paul Wouters
paul at vault.libreswan.fi
Tue Sep 15 02:17:33 UTC 2020
New commits:
commit cbce4975ad13ae69b35c95572995fefb529a82bc
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Sep 14 22:14:27 2020 -0400
testing: fixup ikev2-cp-rekey-01 and add ikev2-cp-rekey-02-up-up
One test case uses --up and another --up for rekey
One test case uses --up and whack --ipsec-rekey
Behaviour is slightly different. Ideally, the second --up
command would recognise it is really supposed to be a rekey.
commit 2088806e4580d3dde09840ca342832e45ff7c67c
Author: Paul Wouters <pwouters at redhat.com>
Date: Mon Sep 14 22:03:02 2020 -0400
IKEv2: CP payload is not required in an IPsec REKEY exchange
We allowed it to be missing for STATE_V2_REKEY_CHILD_I1 but not
for STATE_V2_NEW_CHILD_I1. The latter is generated when you
run ipsec auto --up on an "up" connection (versus when you do
an ipsec whack --ipsec-rekey)
More information about the Swan-commit
mailing list