[Swan-commit] Changes to ref refs/heads/main

Andrew Cagney cagney at vault.libreswan.fi
Wed Aug 11 02:33:59 UTC 2021


New commits:
commit 8d75f4b2de862f93055e8c063d03c016a6e4a67f
Author: Andrew Cagney <cagney at gnu.org>
Date:   Tue Aug 10 20:08:09 2021 -0400

    ikev2: after an IKE SA rekey, move the initiator request queue to the new SA
    
    Fixes an acquire being lost while a childless sec_label IKE SA
    is being rekeyed.

commit be3583b4ecd5beeef5e6770e3ea4581f76757338
Author: Andrew Cagney <cagney at gnu.org>
Date:   Tue Aug 10 20:22:49 2021 -0400

    testing: add ikev2-labeled-ipsec-06-rekey-ike-acquire
    
    Trigger an acquire half way through an IKE rekey exchange:
    
    - use <<--impair drop-outgoing:1>> to cause the IKE rekey to stall
      (it will resume when there's a retransmit)
    
    - trigger the acquire
    
    Since there's a transaction in progress the acquire is put onto
    the old IKE SA's message queue.  When the new IKE SA establishes
    it is moved over and then initiated.



More information about the Swan-commit mailing list