[Swan] Version 3.31 XFRM implementation

Paul Overton Paul at trustedcyber.co.uk
Wed Mar 11 14:20:22 UTC 2020


Hi Paul,

OK I have patched the file keywords.c. I don't get any errors now, but the interfaces (or interface if I use yes) don't have the required IP address configured once the tunnels come up. 

Is more work required on _updown.netkey ?

Thanks for sending over the patch. 

Regards Paul

-----Original Message-----
From: Paul Wouters [mailto:paul at nohats.ca] 
Sent: 11 March 2020 13:17
To: Paul Overton <Paul at trustedcyber.co.uk>
Cc: Swan at lists.libreswan.org
Subject: RE: [Swan] Version 3.31 XFRM implementation

On Wed, 11 Mar 2020, Paul Overton wrote:

> Thanks for the release of 3.31, I have replaced my 3.30 implementation and tested.
>
> I note that the commands leftinterface-ip= or rightinterface-ip= still do not install an IP address on the resultant ipsecX interfaces.
>
> Indeed it still reports that this command is obsolete.

That was a mistake on our end :( The 3.31 release should have contained this patch:

https://github.com/libreswan/libreswan/commit/6d7aa7ef558b56df0aea7111236d9f0588b09fac

> Is this a work in progress ?

I guess it is now :/

Paul


More information about the Swan mailing list