[Swan-commit] Changes to ref refs/heads/main

Andrew Cagney cagney at vault.libreswan.fi
Tue Nov 21 20:48:54 EET 2023


New commits:
commit 0c218c31182ec4b5964e931118cca2949f18df43
Author: Andrew Cagney <cagney at gnu.org>
Date:   Tue Nov 21 13:20:07 2023 -0500

    routing: weaken pexpect() that unrouted connection has no owner
    
    An UNROUTED connection (i.e., no Child SA) can
    still have an IKE SA, just as long as that IKE SA
    matches what is negotiating the connection?
    
    For instance:
    
        up cuckold     -- #1, #2
        up cuckoo      -- #3 (uses #1)
        down cuckold   -- only deletes #2, #1 is in use
    
    followed by:
    
        up cuckold
    
    will initiate the connection cuckold with IKE SA
    still set to #1.



More information about the Swan-commit mailing list