[Swan-commit] Changes to ref refs/heads/main
New commits: commit 81dde5ece7ce9372789e3d542ba5ccc4e8941fa7 Author: Andrew Cagney Date: Mon Sep 25 23:15:24 2023 -0400 testing: EPEM updates ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit 6543dafef4dd57b3c52aa40e54690a04a04bc02c Author: Andrew Cagney Date: Mon Sep 25 22:14:11 2023 -0400 testing: update dpd-04 when a dpd sends a delete seems random ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits:
commit 17b77c42ee412e51167e00d458a1e308d92f28ab
Author: Andrew Cagney
Date: Mon Sep 25 20:59:21 2023 -0400
ikev1: for dpd timeout, send delete (even though it should be pointless)
and use connection_delete_{ike,child}()
Tests are blocking only half the packets and the IKEv1 code likes
to send deletes when DPD indicates things are dead (sometimes).
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits:
commit 50afae36b6846baa269eff51d307ac5488610e85
Author: Andrew Cagney
Date: Mon Sep 25 18:57:43 2023 -0400
testing: sprinkle kernel-{state,policy}.sh
commit e7308e8a3817a09c9629d773a41a24b7fc68f89d
Author: Andrew Cagney
Date: Mon Sep 25 20:55:22 2023 -0400
testing: sanitize ipsec-kernel-state.sh's ephem ports
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit 3682d714422e27477028c609e70dcbc208c43d98 Author: Andrew Cagney Date: Mon Sep 25 20:10:44 2023 -0400 testing: update dpd-03's description The block rule only stops messages inbound to west which means that should west send a delete it still reaches east. While that is what the output expects, it, perhaps isn't the indent. ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits:
commit 2da747a102e36431fcfb90009faa0b2b309b6ea8
Author: Andrew Cagney
Date: Mon Sep 25 18:49:08 2023 -0400
testing: sprinkle ipsec-kernel-{state,policy}.sh
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit 74b840bf1b8343d400ef6c8ec14a550598c214c6 Author: Tuomo Soini Date: Mon Sep 25 23:57:09 2023 +0300 building: use @@VAR@@ consistently for all transformations commit e6610fe6dbe9bf9acc70a3c1d5a796ceedc8e9d3 Author: Tuomo Soini Date: Mon Sep 25 23:48:56 2023 +0300 building: remove unused transformations commit afd05592f39ae645a90c413f0f4fc8caaf6a84c2 Author: Tuomo Soini Date: Mon Sep 25 23:21:48 2023 +0300 building: change HAVE_*TABLES to USE_*TABLES More consistent with reset of config.mk Make variables. #1288 Also report which features are enabled. ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit e1b84fc0048e50d4ea9b72e9ec51fad3c772bf99 Author: Andrew Cagney Date: Mon Sep 25 16:52:51 2023 -0400 ikev1: in event_v1_dpd_timeout() use connection_delete_child() but only after flaging ike as not viable; stop children chasing their own tail ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit 5ec056dbb5cecd7ba06b074434c8aa74497875e3 Author: Andrew Cagney Date: Mon Sep 25 16:19:47 2023 -0400 testing: delete tweaks ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit f59e09bc15c228d1b5d21c5d62b3b92cfdf55b91 Author: Andrew Cagney Date: Mon Sep 25 16:13:25 2023 -0400 labeled ipsec: handle delete ike of rekeyed sa ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit 10a7befe248305bb9b8ebc17b272706f628bab1c Author: Andrew Cagney Date: Mon Sep 25 13:42:11 2023 -0400 initiate: honour .viable_parent When looking for an IKE SA to initiate a new Child SA check that an established candidate is still viable (as in not being deleted). Since .viable_parent started in the IKEv2 code, IKEv1 has never had reason to check this. IKEv2 does check it but only after commiting to an IKE SA. commit 45b6dbaa0d533fbec4ddc509c08fe64e4c83eba0 Author: Andrew Cagney Date: Mon Sep 25 13:01:02 2023 -0400 ikev1: drop EROUTE_CARE param to dpd_outI() always true since at least 3.13 ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit 211f7f6aa6ed3b3bd10221eda9cab6bd5556fb02 Author: Andrew Cagney Date: Mon Sep 25 14:03:07 2023 -0400 ikev1: drop delete_v1_states_by_connection() call in event_v1_dpd_timeout() Identical code appears immediately above. ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit 5d1d995ceaca8d1c3f1fdd279a9b3e4dcb5e55de Author: Andrew Cagney Date: Mon Sep 25 13:38:27 2023 -0400 labeled ipsec: use connection_route() to unrouted->routed_ondemand IKE SA Note that there are two unrouted->routed_ondemand functions: seclabel: only installs first SPD; installs in/out traps normal: installs all SPDs; installs out traps Note that the initiated IKE SA is in UNROUTED when it should be in UNROUTED_NEGOTIATION. ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit a468203214dfb4aef5cd91fd080f41f3164cd576 Author: Andrew Cagney Date: Mon Sep 25 09:43:38 2023 -0400 routing: refactor replace_ipsec_with_bare_kernel_policies() move set_routing() to caller; the most notorious of which is teardown_ipsec_kernel_policies() ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit 1ea3d762f769c69f9d84d9dfe1df7805e3f3dc0a Author: Andrew Cagney Date: Mon Sep 25 09:22:42 2023 -0400 routing: drop now redundant set_newest_sa() Only routing.c updates .newest_*_sa and ldbg_routing_stop() logs any changes. ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit f13f964c166f719fdd482bd7ff55efbe1bd6ccd0 Author: Andrew Cagney Date: Mon Sep 25 09:53:46 2023 -0400 testing: no longer expect double revival follow-up: routing: drop another redundant delete_ike_family() ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit 03d7eff3d4cc0bc6fb088187a0cd2f79e521fb5b Author: Andrew Cagney Date: Mon Sep 25 09:05:10 2023 -0400 routing: update .newest_ipsec_sa in connection_establish_outbound() instead of install_ipsec_sa() ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit d5be77f61ba52ab120b9c047fd151f788def77b5 Author: Andrew Cagney Date: Mon Sep 25 08:37:07 2023 -0400 routing: drop another redundant delete_ike_family() in DELETE_IKE to ROUTED_ONDEMAND PERMANENT ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit a5249e17fdce0d6e9b8967404b5f67e8ed218119 Author: Andrew Cagney Date: Mon Sep 25 08:36:16 2023 -0400 routing: drop unused IKE parameter to connection_established*() ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit b2e6273017023dce99479050ee48ecf990c860d8 Author: Andrew Cagney Date: Mon Sep 25 07:21:31 2023 -0400 ikev1: send expire to connection_delete*() and not delete_state() ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits:
commit a7d4b086e851a8873174ccb2159d6e68757bc234
Author: Andrew Cagney
Date: Sun Sep 24 20:31:41 2023 -0400
routing: add connection_routing_clear(), call from delete_state()
commit 1285e2812f7e8db8a69e969894c0002ea9db9b72
Author: Andrew Cagney
Date: Sun Sep 24 11:48:53 2023 -0400
routing: debug-log the fake connection_establish_ike() event
commit cc95e2c35f057fbe906076155ff02669a94daa65
Author: Andrew Cagney
Date: Sun Sep 24 11:43:39 2023 -0400
routing: add ldbg_routing_{start,stop,skip}()
and drop ldbg_routing_event()
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit
[Swan-commit] Changes to ref refs/heads/main
New commits: commit 9acf387576832d85c2dc548c2b982e65472907f3 Author: Andrew Cagney Date: Sun Sep 24 22:24:18 2023 -0400 routing: drop another delete_ike_family() no-op in DELETE_IKE -> UNROUTED_NEGOTIATION INSTANCE ___ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit
