Re: [Swan] default config that works with recent android/win10/win11/macos/ios

2024-03-01 Thread John Crisp via Swan
On 2 March 2024 01:57:58 CET, Paul Wouters wrote: >ps. note that aiming your frustrations at opensource developers is >never a good idea. Neither is telling us what you expect us to do >without paying us for our time and effort while getting the software >and some mailing list support for

Re: [Swan] default config that works with recent android/win10/win11/macos/ios

2024-03-01 Thread Paul Wouters via Swan
On Thu, 29 Feb 2024, Marc via Swan wrote: Where can I find a working and tested config, that offers vpn connectivity with the os default clients of android, win10, win11, macos and ios? (maybe put this on some wiki/example page) Not sure there is one as the variations in systems are almost

[Swan-commit] Changes to ref refs/heads/main

2024-03-01 Thread Andrew Cagney via Swan-commit
New commits: commit 36e18beac8fabd5a49a47145fe097847e8955c54 Author: Andrew Cagney Date: Fri Mar 1 19:27:53 2024 -0500 testing: update crossing-streams-20-peer-restarts-* - good ___ Swan-commit mailing list Swan-commit@lists.libreswan.org

[Swan-commit] Changes to ref refs/heads/main

2024-03-01 Thread Andrew Cagney via Swan-commit
New commits: commit 8e9b0b4ee9612bb6b1eb8515e5d1e30e8d22cd28 Author: Andrew Cagney Date: Fri Mar 1 19:14:48 2024 -0500 routing: drop .negotiating_child_sa check skipping IPsec policy The code was trying to stop a second SA taking over a connection owned by the first SA. But

Re: [Swan] Possible to setup multiple connections, partly behind NAT?

2024-03-01 Thread Paul Wouters via Swan
On Fri, 1 Mar 2024, Phil Nightowl wrote: still could not get it fixed so far. Is there perhaps an overview of the testing configurations? Not a real overview, but there is a list. Each of the entries has its own description.txt file:

[Swan-commit] Changes to ref refs/heads/main

2024-03-01 Thread Andrew Cagney via Swan-commit
New commits: commit bc19fd2ddc8c9da58ae12094bfc9406a058cf49d Author: Andrew Cagney Date: Fri Mar 1 16:54:56 2024 -0500 testing: add WIP crossing-streams-20-peer-restarts-* See: crossing streams too strict leaving to few states #1635

Re: [Swan-dev] Mac OS Sonoma IKEv2 issue

2024-03-01 Thread Paul Wouters via Swan-dev
On Fri, 1 Mar 2024, Rolando Bermúdez Peña via Swan-dev wrote: I have libresawn version "ibreswan-3.25-4.8.amzn2.0.2.x86_64" for a vpn in a server. I am trying to connect using IKEv2 from Mac clients. From a Mac with Ventura it connects fine, from a Mac with Sonoma it does not connect. These 

[Swan-dev] Mac OS Sonoma IKEv2 issue

2024-03-01 Thread Rolando Bermúdez Peña via Swan-dev
Hello, I have libresawn version "ibreswan-3.25-4.8.amzn2.0.2.x86_64" for a vpn in a server. I am trying to connect using IKEv2 from Mac clients. >From a Mac with Ventura it connects fine, from a Mac with Sonoma it does not connect. These are the logs for both connections. Just trying to figure

[Swan-commit] Changes to ref refs/heads/main

2024-03-01 Thread Andrew Cagney via Swan-commit
New commits: commit a84013ea2f3dac36b697d5d46b2d8076d5c4f9d1 Author: Andrew Cagney Date: Fri Mar 1 10:07:00 2024 -0500 kernel: update debug-logs when kernel policy install is skipped ___ Swan-commit mailing list Swan-commit@lists.libreswan.org

[Swan-commit] Changes to ref refs/heads/main

2024-03-01 Thread Andrew Cagney via Swan-commit
New commits: commit f7dfac6c1388e2af27e701d873db5156d37bf68c Author: Andrew Cagney Date: Thu Feb 29 14:04:03 2024 -0500 testing kvm: rename testing/libvirt -> testing/kvm Expect parts of testing/utils/kvm* to follow putting all the kvm code into a standalone directory.

Re: [Swan] Possible to setup multiple connections, partly behind NAT?

2024-03-01 Thread Phil Nightowl via Swan
Hello, still could not get it fixed so far. Is there perhaps an overview of the testing configurations? And do you perhaps know off the top of your head if this scenario (both ends behind NAT) is covered, i. e. guaranteed to be working? And is it possible to find out since which version that