[Swan-commit] Changes to ref refs/heads/main

Antony Antony antony at vault.libreswan.fi
Wed Jul 19 19:29:50 EEST 2023


New commits:
commit 27a050ae6fc8b1bb8ab67cc01965df4c14e88c96
Author: Antony Antony <antony at phenome.org>
Date:   Wed Jul 19 18:13:18 2023 +0200

    testing: more testing/guestbin/tcpdump.sh cleanup

commit d4dd9bac6ae2de37728a0c04109ccd534ac63b33
Author: Antony Antony <antony at phenome.org>
Date:   Sat Sep 26 09:06:59 2020 +0000

    xfrmi: set outmark on UDP socket avoid routing IKE packets to xfrmi interface
    
    Fix IKE packets sent over ESP.
    
    For example the IKE responder sends IKE_AUTH response via xfrm interface, causing
    initiator to drop the ESP packet and not able to establish IKE.
    
    This fix sets output mark on IKE socket when sending, ensuring proper routing.
    
    Test cases: ikev2-xfrmi-02-responder ikev2-xfrmi-16-rekey
      ikev2-xfrmi-16-rekey-responder

commit e33b036cf30a730437ed64f5ce3d2b2b8f05031d
Author: Antony Antony <antony at phenome.org>
Date:   Wed Jul 19 18:01:31 2023 +0200

    testing: fixes due changes tcpdump.sh

commit f89483358005101018f484e1913255e6cd027fde
Author: Antony Antony <antony at phenome.org>
Date:   Wed Jul 19 17:44:59 2023 +0200

    testing: fix output delete table ipsec-log

commit d5b2f153c48215cbc32b6980c52baa56e74c387f
Author: Antony Antony <antony at phenome.org>
Date:   Wed Jul 19 17:38:13 2023 +0200

    kernel: fix pexpect_cat
    
    ikev2-73-cat-nftables was brken with the following commit.
    relax this condition (c->policy & POLICY_OPPORTUNISTIC)
    
    Fixes: c9faebc012d1 ("kernel: add some expectations around adding CATs")

commit e1e90fd01b8f65523c558cdf86fe1f02474cc5ad
Author: Antony Antony <antony at phenome.org>
Date:   Wed Jul 19 14:09:35 2023 +0000

    ipsec: fix nftable error
    
    Error: No such file or directory; did you mean table ‘ipsec-log’ in family inet?
    delete table ipsec-log
                 ^^^^^^^^^



More information about the Swan-commit mailing list