[Swan-commit] Changes to ref refs/heads/main
Andrew Cagney
cagney at vault.libreswan.fi
Sun Mar 12 19:44:29 EET 2023
New commits:
commit 7a167e70aa22a78bd32165e70a6d7e4da06ac06c
Author: Andrew Cagney <cagney at gnu.org>
Date: Sun Mar 12 12:31:05 2023 -0400
routing: dump bogus TEMPLATE transitions
The only needed template transitions are:
UNROUTED -[ROUTE]-> ROUTED_PROSPECTIVE -[UNROUTE]-> UNROUTED
The transition:
UNROUTED -[UNROUTE]-> UNROUTED
while suspect, remains as code is triggering it.
commit 534e3d7d96612c466e0f4745065c46f05c72f25e
Author: Andrew Cagney <cagney at gnu.org>
Date: Sun Mar 12 11:39:31 2023 -0400
sec_label: make a labeled_parent() a CK_INSTANCE, not a CK_TEMPLATE
sec_labels connections are instantiated:
template -> parent (IKE) -> child (IPsec)
The "parent" connection, which is both kind of template and kind
of instance like, was being instantiated as a CK_TEMPLATE. This
meant that the template routing code had to handle some pretty
weird sec_label specific transitions. Changing it to CK_INSTANCE
lets that code be dumped.
More information about the Swan-commit
mailing list