[Swan-commit] Changes to ref refs/heads/main
Andrew Cagney
cagney at vault.libreswan.fi
Wed Aug 11 02:33:59 UTC 2021
New commits:
commit 8d75f4b2de862f93055e8c063d03c016a6e4a67f
Author: Andrew Cagney <cagney at gnu.org>
Date: Tue Aug 10 20:08:09 2021 -0400
ikev2: after an IKE SA rekey, move the initiator request queue to the new SA
Fixes an acquire being lost while a childless sec_label IKE SA
is being rekeyed.
commit be3583b4ecd5beeef5e6770e3ea4581f76757338
Author: Andrew Cagney <cagney at gnu.org>
Date: Tue Aug 10 20:22:49 2021 -0400
testing: add ikev2-labeled-ipsec-06-rekey-ike-acquire
Trigger an acquire half way through an IKE rekey exchange:
- use <<--impair drop-outgoing:1>> to cause the IKE rekey to stall
(it will resume when there's a retransmit)
- trigger the acquire
Since there's a transaction in progress the acquire is put onto
the old IKE SA's message queue. When the new IKE SA establishes
it is moved over and then initiated.
More information about the Swan-commit
mailing list