[Swan-dev] changes in test results as of Sunday evening, Toronto time

Paul Wouters paul at nohats.ca
Wed Sep 30 13:49:09 UTC 2015


On Wed, 30 Sep 2015, D. Hugh Redelmeier wrote:

> dpd-01
> 	good => bad
> 	This might MATTER.
> west #
>  ipsec eroute
> -0	    192.1.2.45/32      -> 192.1.2.23/32	     => %trap
> +0	    192.1.2.45/32      -> 192.1.2.23/32	     => tun0x1002 at 192.1.2.23

That's a timing thing of the test. with very short DPD times you
sometimes get the dpdaction timed differently and it shows up
as a tun -> trap or trap -> tun difference.

> ikev2-liveness-01-netkey
> 	New.  Missing east reference log.
> "westnet-eastnet-ipv4-psk-ikev2" #2: EXPECTATION FAILED at /source/programs/pluto/ikev2_parent.c:3943: !IS_CHILD_SA(st)
>
> ikev2-liveness-01-netkey-drop
> 	New.  Passed.
> "westnet-eastnet-ipv4-psk-ikev2" #2: EXPECTATION FAILED at /source/programs/pluto/ikev2_parent.c:3943: !IS_CHILD_SA(st)

We know this needs fixing. It is waiting on the new state names that
more clearly seperate parent and child sa's.

> interop-ikev2-strongswan-19-x509-res-certreq
> 	bad => bad (east: ok, an improvement)

I'll check that one out.

Paul


More information about the Swan-dev mailing list