[Swan-commit] Changes to ref refs/heads/main

Paul Wouters paul at vault.libreswan.fi
Sat Dec 30 05:11:38 EET 2023


New commits:
commit b740a34b4b34c8b147457ad61767ed1a6cf347bb
Author: Paul Wouters <paul.wouters at aiven.io>
Date:   Fri Dec 29 22:10:16 2023 -0500

    testing: updates TESTLIST
    
    The following tests now pass:
    
    ikev2-xfrmi-15-interface-ip
    ikev2-xfrmi-16-rekey
    interop-ikev2-strongswan-14-delete-sa-shared

commit 4268a322bdc0d30ff0648cc958448cad312d8b0d
Author: Paul Wouters <paul.wouters at aiven.io>
Date:   Fri Dec 29 22:05:44 2023 -0500

    testing: fixup ikev2-xfrmi-16-rekey
    
    final.sh was showing the side not using ipsec interface
    
    The test used "ipsec add|up" which will cause issues if
    we need to git bisect to where "ipsec auto" was needed.
    
    Confusing messages from tcpdump.sh no longer appear
    
    Explain a bit better that rekeying over a /32 tunnel tests
    that IKE does not go over ESP by accident.

commit 73dd5030b08e0f7b06cccfb185b7fa0e5a1549e0
Author: Paul Wouters <paul.wouters at aiven.io>
Date:   Fri Dec 29 22:08:24 2023 -0500

    testing: stop_tcpdump in tcpdump.sh start should not show output.
    
    It was showing confusing output (eg tpcdump XXXX not running") and
    it would be different whether or not it killed a runaway tcpdump
    (thereby making the workaround not be useful as the test would
    fail on this extra output)

commit 924fc0ef9c579325c322757d3df15c3d216ef52d
Author: Paul Wouters <paul.wouters at aiven.io>
Date:   Fri Dec 29 21:18:24 2023 -0500

    testing: complete ikev2-xfrmi-15-interface-ip
    
    Could be simplified more.

commit ec4f90717c788033c25b9285322ed9765b6d3778
Author: Paul Wouters <paul.wouters at aiven.io>
Date:   Fri Dec 29 21:10:07 2023 -0500

    testing: fix interop-ikev2-strongswan-14-delete-sa-shared
    
    This never worked before because we used "strongswan down conn"
    instead of "strongswan down conn{1}". The first deletes the IKE SA,
    the latter deletes the Child SA.
    
    The console output of strongswan confirms libreswan's delete response.

commit f4b4619b9e6fd03b4553ec6d765db6517da58bc7
Author: Paul Wouters <paul.wouters at aiven.io>
Date:   Fri Dec 29 21:08:10 2023 -0500

    testing: add more SPI sanitizers to strongswan.sed

commit a8c9ecb14031191c328163a12acf4d4d6307a439
Author: Paul Wouters <paul.wouters at aiven.io>
Date:   Fri Dec 29 20:01:04 2023 -0500

    testing: delete freeswan era multinet-03
    
    depends on too many timers, dates to uml/freeswan days



More information about the Swan-commit mailing list