[Swan-dev] regression in 3.16rc1

Tuomo Soini tis at foobar.fi
Wed Nov 4 08:11:02 UTC 2015


We have quite bad regression in 3.16rc1 which I'd vote for release
blocker.

A has auto=start,dpdaction=restart, ikev2=never
B has auto=add,dpdaction=clear, ikev2=never

When B disconnects tunnel it sends delete sa
A disconnects and clears all states.

So delete SA removes all states in case of auto=start which must not
happen.

If responder sends delete sa initiator stops retrying tunnel.

-- 
Tuomo Soini <tis at foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <http://foobar.fi/>


More information about the Swan-dev mailing list