Re: [Swan-dev] pluto: Fix NSS certificate crash

2015-05-01 Thread Matt Rogers
On 04/30, Herbert Xu wrote: When we instantiate a connection we simply copy the certificate over, without getting a reference count over the new certificate reference, resulting in a bogus certificate when the instance is deleted. Signed-off-by: Herbert Xu herb...@gondor.apana.org.au

Re: [Swan-dev] pluto: Fix bogus no RSA public key known for '%fromcert'

2015-05-01 Thread Matt Rogers
On 05/01, Herbert Xu wrote: When refine_host_connection tests against a %fromcert RW connection followed by other right=%any connections with fixed IDs (e.g., @hostname), it will lose the fromcert setting. So when it does eventually return with the %fromcert RW connection fromcert will be