[Swan-commit] Changes to ref refs/heads/main

Andrew Cagney cagney at vault.libreswan.fi
Tue Oct 10 21:36:44 EEST 2023


New commits:
commit 68a15c7da608aa779e39c44121769a4093439c5f
Author: Andrew Cagney <cagney at gnu.org>
Date:   Tue Oct 10 14:25:17 2023 -0400

    routing: set .newest_routing_sa to ROUTED_NEGOTIATION Child SA
    
    When a Child SA initiates, updating the routing from
    ROUTED_ONDEMAND->ROUTED_NEGOTIATION, make that child the
    connection's routing owner and, hence, responsible for
    any unrouting (for instance when the exchange fails)
    
    ref #1135
    ref #1316

commit 4e1d39365a3aa117be6194412101df0fe82ec4d3
Author: Andrew Cagney <cagney at gnu.org>
Date:   Tue Oct 10 14:23:45 2023 -0400

    routing: handle DELETE_CHILD, ROUTED_NEGOTIATION, PERMANENT

commit 36e23676f7a98aff31c0a174df2c0218fbb3cef7
Author: Andrew Cagney <cagney at gnu.org>
Date:   Tue Oct 10 13:24:01 2023 -0400

    routing: in install_inbound_ipsec_kernel_policies() allow owner
    
    In install_inbound_ipsec_kernel_policies() only skip installing
    policy when the routing owner is some other Child SA.
    
    For transitions such as:
      ROUTED_ONDEMAND->ROUTED_NEGOTIATION->ROUTED_INBOUND
    .newest_routing_sa will be set (if the bug is fixed) while
    installing the connection's negotiation policy.



More information about the Swan-commit mailing list