[Swan-commit] Changes to ref refs/heads/main

2022-10-30 Thread Andrew Cagney
New commits: commit aafe2cf09e2926172c6943236b558bbe8b9b8251 Author: Andrew Cagney Date: Sun Oct 30 22:09:32 2022 -0400 testing: also ikev2-rw-multiple-subnets-6-66in4 ___ Swan-commit mailing list Swan-commit@lists.libreswan.org

[Swan-commit] Changes to ref refs/heads/main

2022-10-30 Thread Andrew Cagney
New commits: commit 3c90599ed8117181b0f56a5e14c9cb7329bbf017 Author: Andrew Cagney Date: Sat Oct 29 11:55:04 2022 -0400 testing: more subnets combinations ___ Swan-commit mailing list Swan-commit@lists.libreswan.org

Re: [Swan-dev] heads up, the great spd scramble

2022-10-30 Thread Andrew Cagney
> > - spd.this -> spd.local + spd.that -> spd.remote > > because this and that get used to refer to either end Here's something concrete: case ENCAP_DIRECTION_INBOUND: src = >remote; dst = >local; > The idea of this/that was that it was not always already

Re: [Swan-dev] heads up, the great spd scramble

2022-10-30 Thread Paul Wouters
On Fri, 28 Oct 2022, Andrew Cagney wrote: I'm about to change "spd" in struct connection to a pointer; that is from: struct spd_route spd; to: struct spd_route *spd; thanks for the heads up. My motivation is to make the code generating a list of SPDs from subnets simpler (I'm guessing

Re: [Swan] libreswan inside local network with NAT (left) - MacOS roadwarrior (right)

2022-10-30 Thread Paul Wouters
Yes, use the IKEv2 road warrior setup examples and forward port 500,4500 UDP. Sent using a virtual keyboard on a phone > On Oct 29, 2022, at 08:43, Rodrigo Gruppelli wrote: > > Greetings! > > I would like to know if it’s possible to achieve this kind of setup: > > On the left side, there

[Swan-commit] Changes to ref refs/heads/main

2022-10-30 Thread Andrew Cagney
New commits: commit 44e329b9b618d6a2e29cff000d31edb206126f88 Author: Andrew Cagney Date: Sun Oct 30 10:41:37 2022 -0400 installing: cleanup IPSEC_CONFDDIR aka ipsec.d - IPSEC_CONFDDIR matches the environment variable - drop FINALEXAMPLECONFDDIR et.al. - use double @@ in

Re: [Swan] IPv4 and IPv6 through a single IPSec connection

2022-10-30 Thread Andrew Cagney
On Fri, 28 Oct 2022 at 21:49, Paul Wouters wrote: > > Not yet in 4.9. But work to support this has recently started. > > Sent using a virtual keyboard on a phone > > On Oct 28, 2022, at 19:52, Nestor Melo wrote: > >  > Hi, > > > We would like to configure a single IPSec connection that would

[Swan-commit] Changes to ref refs/heads/main

2022-10-30 Thread Tuomo Soini
New commits: commit 07f175084815acdadcdc23ff2917cf2d0dc033bf Author: Tuomo Soini Date: Sun Oct 30 10:53:30 2022 +0200 install: install configs from original files instead of examples With this change we could make installing examples optional