[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit 33de7be4fdcc1d24a5068bac65b91ac9eec87bac Author: Andrew Cagney Date: Tue May 7 00:08:36 2024 -0400 enums: return bool from enum_name_short(), and pass enum_buf param change: const char *name = enum_name_short() if (name != NULL) ... to:

[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit 2c4aa1a7d33846c31f5739c581a791df94c96ddd Author: Paul Wouters Date: Mon May 6 16:58:10 2024 -0400 testing: added ecdsa/rsa mix tests ikev2-x509-ecdsa-04-also-rsa ikev2-x509-ecdsa-05-rsa-asym ikev2-x509-ecdsa-06-rsa-asym-flip commit

[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit ec74762b2981cb301d1d7f6a9d671db51e86be37 Author: Andrew Cagney Date: Mon May 6 16:34:28 2024 -0400 testing: update impair-11-ikev2-transform logging of unknown values changed ___ Swan-commit mailing list

[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit 6c0b4c6317631c1de45d80733f64b4bef221929e Author: Andrew Cagney Date: Mon May 6 15:28:59 2024 -0400 host_pair: exclude never_negotiate() from returned connections since code is looking for a negotiatable connection

[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit b6d19d5bbd6669c2aaa9be499f99270ea6af3880 Author: Andrew Cagney Date: Mon May 6 14:08:54 2024 -0400 enums: change enum_buf .buf to const char *; always set use, replacing: enum_buf eb; /* must be same scope as en */ const char *en = str_enum(, e, );

[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit b05b013b83b6174ddc3f2b7320a1422f80e4b1b8 Author: Andrew Cagney Date: Mon May 6 15:17:04 2024 -0400 redirect: more notes on the .first_addr field ___ Swan-commit mailing list Swan-commit@lists.libreswan.org

[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit c72b8e2b81c7b5db1ce26b0172cfbf17e4f5e816 Author: Andrew Cagney Date: Mon May 6 14:26:35 2024 -0400 stats: don't log "Reserved" fields ___ Swan-commit mailing list Swan-commit@lists.libreswan.org

[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit ce8787324833691f128124eaeed3a47922c2472c Author: Andrew Cagney Date: Mon May 6 13:03:39 2024 -0400 enums: sprinkle s/enum_name_short()/str_enum_short()/ ___ Swan-commit mailing list Swan-commit@lists.libreswan.org

[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit 82e61bf714fad47ae5d13e08a318a04d2f132dc7 Merge: 57664f6bd2 53ed406a16 Author: Andrew Cagney Date: Mon May 6 10:42:44 2024 -0400 xfrmi: add xfrm interface before routing connection (by wofferl) Merge branch 'xfrmi-route' Signed-off-by: Andrew Cagney

Re: [Swan-dev] XFRMi routing problems with some special cases

2024-05-06 Thread Andrew Cagney via Swan-dev
> ok, thanks, I will create some tests for the problematic cases and hopefully > some fixes. I'll push it once I've got a full test result. Long term, should: +#ifdef USE_XFRM_INTERFACE +if (c->xfrmi != NULL && c->xfrmi->if_id != 0) +if (!add_xfrm_interface(c, c->logger)) +

[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit 57664f6bd22482adfd6b2093ade6f1dffaf12746 Author: Andrew Cagney Date: Mon May 6 10:28:23 2024 -0400 enums: add {str,jam}_enum_long() prep making {str,jam}_enum() aliases for {str,jam}_enum_short() ___ Swan-commit

[Swan-commit] Changes to ref refs/heads/main

2024-05-06 Thread Libreswan VCS commit list via Swan-commit
New commits: commit b18441edbcc0bf708429ecaeb3bde5ce04e1b9b9 Author: Andrew Cagney Date: Mon May 6 09:46:24 2024 -0400 ikev2: sprinkle str_enum() ___ Swan-commit mailing list Swan-commit@lists.libreswan.org

Re: [Swan] Data sent in clear despite established tunnel

2024-05-06 Thread Paul Wouters via Swan
On Mon, 6 May 2024, Phil Nightowl via Swan wrote: After giving it a second look, a brief response to my original message. The xfrm policies seem quite wrong after all: Can you share the "ipsec traffic" output after doing a few pings over the tunnel? I have a feeling you might not actually

Re: [Swan] Data sent in clear despite established tunnel

2024-05-06 Thread Phil Nightowl via Swan
After giving it a second look, a brief response to my original message. The xfrm policies seem quite wrong after all: > src rw.pp.uu.bb/32 dst 192.168.1.1/32 > dir out priority 1753280 ptype main > tmpl src rw.ii.nn.tt dst srv.pp.uu.bb > proto esp reqid 16393 mode