[Swan-commit] Changes to ref refs/heads/main

Andrew Cagney cagney at vault.libreswan.fi
Thu Aug 12 22:44:29 UTC 2021


New commits:
commit 429f4714f980e25d879080937204b594abbc691c
Author: Andrew Cagney <cagney at gnu.org>
Date:   Thu Aug 12 16:14:42 2021 -0400

    ikev2: add work-in-progress EVENT_v2_REAUTH
    
    Like EVENT_SA_REPLACE, this calls ipsecdoi_replace(st, 1) to initiate
    a new IKE SA.  However, unlike EVENT_SA_REPLACE, it does not also
    immediately delete the existing IKE SA.
    
    Since both the old and new IKE SA still exist it's possible to test an
    acquire mid REAUTH (the acquire should be added to the new
    SA's pending list; and should not induce a core dump).
    
    Currently, the only way to trigger this is:
      --impair event-v2-reauth:<#state>



More information about the Swan-commit mailing list