[Swan-commit] Changes to ref refs/heads/main
Antony Antony
antony at vault.libreswan.fi
Wed Jul 19 19:29:50 EEST 2023
New commits:
commit 27a050ae6fc8b1bb8ab67cc01965df4c14e88c96
Author: Antony Antony <antony at phenome.org>
Date: Wed Jul 19 18:13:18 2023 +0200
testing: more testing/guestbin/tcpdump.sh cleanup
commit d4dd9bac6ae2de37728a0c04109ccd534ac63b33
Author: Antony Antony <antony at phenome.org>
Date: Sat Sep 26 09:06:59 2020 +0000
xfrmi: set outmark on UDP socket avoid routing IKE packets to xfrmi interface
Fix IKE packets sent over ESP.
For example the IKE responder sends IKE_AUTH response via xfrm interface, causing
initiator to drop the ESP packet and not able to establish IKE.
This fix sets output mark on IKE socket when sending, ensuring proper routing.
Test cases: ikev2-xfrmi-02-responder ikev2-xfrmi-16-rekey
ikev2-xfrmi-16-rekey-responder
commit e33b036cf30a730437ed64f5ce3d2b2b8f05031d
Author: Antony Antony <antony at phenome.org>
Date: Wed Jul 19 18:01:31 2023 +0200
testing: fixes due changes tcpdump.sh
commit f89483358005101018f484e1913255e6cd027fde
Author: Antony Antony <antony at phenome.org>
Date: Wed Jul 19 17:44:59 2023 +0200
testing: fix output delete table ipsec-log
commit d5b2f153c48215cbc32b6980c52baa56e74c387f
Author: Antony Antony <antony at phenome.org>
Date: Wed Jul 19 17:38:13 2023 +0200
kernel: fix pexpect_cat
ikev2-73-cat-nftables was brken with the following commit.
relax this condition (c->policy & POLICY_OPPORTUNISTIC)
Fixes: c9faebc012d1 ("kernel: add some expectations around adding CATs")
commit e1e90fd01b8f65523c558cdf86fe1f02474cc5ad
Author: Antony Antony <antony at phenome.org>
Date: Wed Jul 19 14:09:35 2023 +0000
ipsec: fix nftable error
Error: No such file or directory; did you mean table ‘ipsec-log’ in family inet?
delete table ipsec-log
^^^^^^^^^
More information about the Swan-commit
mailing list