[Swan-commit] Changes to ref refs/heads/main
Paul Wouters
paul at vault.libreswan.fi
Wed Jan 10 04:57:23 EET 2024
New commits:
commit 375fd77468e0128ec52f646e201bdd5b6a48535a
Author: Paul Wouters <paul.wouters at aiven.io>
Date: Tue Jan 9 21:56:46 2024 -0500
testing: update ikev2-26-nic-offload-no-hw-*
Since tunnel mode is now blocked from loading, convert test cases
to transport mode.
commit 29614eb87ae6e5dc2abd3e7bec9e981be8676399
Author: Paul Wouters <paul.wouters at aiven.io>
Date: Tue Jan 9 21:36:46 2024 -0500
pluto: check various incompatible settings with nic-offload=packet|auto
- Limit the replay-window size to what is supported in known HW.
(but what to do with replay-window=0 and it disabling ESN?)
- Only allow ESP, not AH or IPTFS
- Do not allow compression
- TODO: what about tfcpad= , encap-dscp, nopmtudisc, ikepad, encapsulation,
More information about the Swan-commit
mailing list