New commits:
commit a34349d4f6baae10ab57b0dbc4ce73f68475a070
Author: Andrew Cagney
Date: Mon Jan 15 10:06:09 2024 -0500
testing: rename ikev1-29-quick-* tests to whack-* tests, make good
And add equivalent initiator tests.
commit ce5949c11c3349b5515302edf03dc3fca3f7557c
Author
New commits:
commit e349e8640d8c913dd4298101d2375b7b5f8a21b9
Author: Andrew Cagney
Date: Sun Jan 14 21:52:34 2024 -0500
routing: handle ESTABLISH_IKE_SA, UNROUTED_INBOUND, PERMANENT
see:
routing: unhandled ESTABLISH_IKE_SA, UNROUTED_INBOUND, PERMANENT #1536
New commits:
commit 8063fff9d74b53bfd3ba777a9d918ecfd589336b
Author: Andrew Cagney
Date: Sun Jan 14 21:52:03 2024 -0500
testing: update ikev1-29-quick-restart
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 46a4a5eafcb0a121a1e1a2da7e1d3c33ad7b8c5c
Author: Andrew Cagney
Date: Sun Jan 14 11:48:18 2024 -0500
testing: update ikev1-29-quick* tests
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 282422a0c7738c3f8e526a7bf72d536d01140f10
Author: Andrew Cagney
Date: Sun Jan 14 11:46:13 2024 -0500
ipsec unroute: down all connections before unrouting
fix:
routing: unhandled UNROUTE, UNROUTED_INBOUND, PERMANENT #1531
why, other than a lack
On Sat, 13 Jan 2024 at 18:13, Bill Atwood wrote:
>
> ??
>
> I do not understand your reply.
Offhand, it looks like the connection should match:
conn RITA6c
left=fd51:20d9:5ad2:b::2
leftid="CN=Ritchie Certificate"
leftrsasigkey=%cert
leftcert=RIcert
right=fd51:20d9:5ad2:b::1
New commits:
commit ff207984d4d37dc53e6143a6f0c58bf3aff68f0c
Author: Andrew Cagney
Date: Sat Jan 13 21:34:19 2024 -0500
terminate: selectively print "terminating SAs using this connection"
Only print the message when there are SAs that need terminatin
<> like every other Makefile out there.
> Note 1: the INSTALL file in the same directory suggests "make all".
INSTALL was gutted.
> Note 2: this error was reported to swan-dev on 2023-09-13, and a
> response was sent by Andrew Cagney to the list on 2023-12-19, reporting
&g
> root@Ritchie:/etc/ipsec.d# cat RITA6C
> conn RITA6c
> left=fd51:20d9:5ad2:b::2
> leftid="CN=Ritchie Certificate"
> leftrsasigkey=%cert
> leftcert=RIcert
> right=fd51:20d9:5ad2:b::1
> rightid="CN=Tarjan Certificate"
> rightrsasigkey=%cert
> auto=add
rename RITA6C
New commits:
commit 060d955871e1a5c643b616cf19854156425afe70
Author: Andrew Cagney
Date: Sat Jan 13 15:31:54 2024 -0500
testing: add ikev1-29-quick-down
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org
New commits:
commit 6c14f0780692ad8dff348443df684a12e70f9fb4
Author: Andrew Cagney
Date: Sat Jan 13 14:15:00 2024 -0500
testing: add wait-for-pluto.sh , use
wrap the somewhat painful but surprisingly effective:
wait-for.sh --match "#1: established" -- cat /tmp
New commits:
commit 08cc164c1e3d3e393e4b206bd961b9bc37694cf7
Author: Andrew Cagney
Date: Sat Jan 13 13:55:06 2024 -0500
testing: sanitize 'sent Quick Mode reply'
note #1419
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit 55936f7e10f166432b12b5ac846713d780f8915c
Author: Andrew Cagney
Date: Sat Jan 13 13:54:03 2024 -0500
testing kvm: handle KVM_RUN_POST_MORTEM=false
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 389dc7a5fcb9ddf457772350bd7508f0c728154d
Author: Andrew Cagney
Date: Fri Jan 12 12:28:51 2024 -0500
impair: simplify (?) unsigned impair values
The single biased unsigned is replaced by:
struct impair_unsigned {
bool enabled;
unsigned
New commits:
commit fe0cb4e6b770e6111efb62c46e384592a662ab12
Author: Andrew Cagney
Date: Fri Jan 12 20:51:33 2024 -0500
testing: update ikev1-29-quick-{delete,unroute,restart} #1531
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit 510d3b897957026682bebbe8e15f87f0c7d4a436
Author: Andrew Cagney
Date: Fri Jan 12 16:11:06 2024 -0500
testing: add ikev1-29-quick-death, wip, #1531
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit fb91c2136ced7321e834ababf0495035c0eee949
Author: Andrew Cagney
Date: Wed Sep 14 10:08:35 2022 -0400
ikev2: include full transition story in debug line "| sending ..."
commit 0d032e01752d004b3095772faaffa48e4f1f3a27
Author: Andrew Cagney
Date: Fri Jan 1
New commits:
commit eff956c18d79c9284c6f5a0d87899e8f56aef461
Author: Andrew Cagney
Date: Fri Jan 12 11:52:39 2024 -0500
CHANGES: IKEv2: when non-MOBIKE never update NATed endpoint
[#1492/Wofferl/Andrew]
commit 384c4667bc3760b2307964ffae7c163fe8e67a02
Author: Andrew Cagney
Date: Fri
New commits:
commit b0843983be6b14ba48e9d26720c00ed0afd912c9
Author: Andrew Cagney
Date: Wed Sep 14 10:06:59 2022 -0400
ikev1: drop redundant dbg("| sending reply packet to ...")
Instead include the full transition story in the debug line:
| sending
New commits:
commit 6fec2bfbaebfd0f3b280650e0a25797e90998ea9
Author: Andrew Cagney
Date: Fri Jan 12 09:29:01 2024 -0500
testing: mark nat-pluto-07 WIP
See IKEv2 liveness does not work with IP change #1492
___
Swan-commit mailing list
New commits:
commit 3bcc0f602687609aa9dea0b4a82ab1e2d35c185f
Author: Andrew Cagney
Date: Thu Jan 11 20:40:42 2024 -0500
impair: s/-/_/ for bool impairments so name matches variable
simplify adding a little
commit 5b101027939c23d86216bb2eabfc0b5e1b70980c
Author: Andrew Cagney
New commits:
commit bb644b1a4b1d095a9d3b492ee4581e564a9f1105
Author: Andrew Cagney
Date: Thu Jan 11 13:59:41 2024 -0500
kernel: debug-logging tweaks
- add missing space between enums
- clarify tunnel, inner-most, and transport
New commits:
commit f9f602398ecd0e99c662f3edfa7246ba1993cd75
Author: Andrew Cagney
Date: Thu Jan 11 13:05:39 2024 -0500
testing: update impair-install-ipsec-sa-* tests
ref #1510
commit 4f1dedadd69402125598478db9d66334ecee4768
Author: Andrew Cagney
Date: Thu Jan 11 13:01:30
New commits:
commit 361246bd8e96e2e89fbf2afacc2d50bc7a7d9658
Author: Andrew Cagney
Date: Thu Jan 11 12:30:37 2024 -0500
kernel: use PEXPECT() when checking .route field
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 51e4e31f63cf01c022708933dabf1b84ca70443d
Author: Andrew Cagney
Date: Thu Jan 11 12:25:17 2024 -0500
building: remember to wrap decl in switch in braces
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit ee97d023a4c6ad1979325f988909c2115590f8db
Author: Andrew Cagney
Date: Thu Jan 11 11:54:30 2024 -0500
building: add missing break needed by older compilers
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit a224728681920fd47ccc6bbc42d7b7f1b726a824
Author: Andrew Cagney
Date: Thu Jan 11 11:49:21 2024 -0500
impair: drop --impair sa-creation
overlaps --impair install-ip-sec-*; not used
___
Swan-commit mailing list
Swan
New commits:
commit ac62ff57ad4edf2e4eb36e584482656e13a28e60
Author: Andrew Cagney
Date: Thu Jan 11 08:29:17 2024 -0500
kernel: sprinkle child_sa over kernel_route_from_state()
commit bee4c1921c27c74d316577dff03782d36075b811
Author: Andrew Cagney
Date: Thu Jan 11 08:25:12 2024 -0500
New commits:
commit 5d4bf01e8af4a2f0d15d84036f637caddeecca50
Author: Andrew Cagney
Date: Wed Jan 10 22:52:38 2024 -0500
kernel: add kernel specific enum kernel_mode
Replace kernel_state's bool .tunnel and kernel_policy's encap_mode .mode
New commits:
commit 4c7d288ff0b72bdb9d52f51df88f3df28e0b3bc3
Author: Andrew Cagney
Date: Wed Jan 10 22:56:49 2024 -0500
routing: add PEER and UNKNOWN to enum initiated_by
For established transitions, assume it was the peer.
___
Swan
New commits:
commit 5dba7326bd9acf68dfd16021eac65dc972d236db
Author: Andrew Cagney
Date: Sun Dec 31 13:06:45 2023 -0500
whack: use optarg_sparse() for --{send,accept}-redirect
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 1682eef69ef263b7f256d1b6c0e02d39ef57bf28
Author: Andrew Cagney
Date: Wed Jan 10 21:01:57 2024 -0500
addconn: don't reject nic-offload when never negotiate
Properly merge:
pluto: check various incompatible settings with nic-offload=packet|auto
New commits:
commit b99eb794ba722851d53a9fedf68e3a0f254b3a29
Author: Andrew Cagney
Date: Wed Jan 10 10:10:49 2024 -0500
testing web: update tester.sh to use ./kvm
fix #1526 fix #1472
commit c132203b2cb4996405f64b3044815a46a5d86fb3
Author: Andrew Cagney
Date: Tue Jan 9 16:23:42
New commits:
commit 43e928356221783748a109af0952b2b2931804d9
Author: Andrew Cagney
Date: Tue Dec 5 21:06:37 2023 -0500
addconn: drop whack_message .encap_mode
use .type instead; clear the deck for what will likely
be separate knobs for transport/tunnel/compression/et.al
New commits:
commit 1e87485325a2f06744346172bc2b7cf88871f08c
Author: Andrew Cagney
Date: Wed Jan 10 11:48:28 2024 -0500
testing: mark ikev2-26-nic-offload-no-hw-{crypto,packet} WIP #1527
Both trigger the PBAD added with:
kernel: consider PACKET|CRYPTO offload with no iface
New commits:
commit d21af12f2d2c99b02bf63560faafa67c75a9f4c3
Author: Andrew Cagney
Date: Wed Jan 10 10:42:52 2024 -0500
kernel: expand install IPsec impairments
add early/late variants
this is part of #1510
commit b0ec5618db773abe68c89dd3443ab742450b476e
Author: Andrew Cagney
New commits:
commit 139eb4d9677d2b1c6b08d78ed0311f0bcd5d425d
Author: Andrew Cagney
Date: Tue Jan 9 22:47:07 2024 -0500
kernel: drop nic_offload_fallback param to setup_esp_nic_offload()
Instead handle case in setup_half_kernel_state().
Note some problems now exposed
New commits:
commit 8914396c79b0fef458b380328750794420756fb6
Author: Andrew Cagney
Date: Wed Jan 10 08:30:28 2024 -0500
kernel: consider PACKET|CRYPTO offload with no iface support PBAD
Per #1512 this should have been stopped during orientation
New commits:
commit 3e44b36e118704f14733de060b31c7a73958c292
Author: Andrew Cagney
Date: Wed Jan 10 08:25:49 2024 -0500
kernel: <> -> <>
Follow-up:
- make enums upper-case with NIC_OFFLOAD_ prefix
fixing: Use lower case to avoid confusion with
> commit 29614eb87ae6e5dc2abd3e7bec9e981be8676399
> Author: Paul Wouters
> Date: Tue Jan 9 21:36:46 2024 -0500
>
> pluto: check various incompatible settings with nic-offload=packet|auto
>
> - Limit the replay-window size to what is supported in known HW.
> (but what to do with
New commits:
commit 44712ca30224c175310d6af4e7b5dccc34ffb412
Author: Andrew Cagney
Date: Tue Jan 9 22:05:28 2024 -0500
kernel: in setup_esp_nic_offload() PASSERT() there's an interface
-> the connection must be oriented
ditto for that there's a real_name
-> caller
New commits:
commit 158dfb081fb735c3ea07a3974392957af0f5a8d6
Author: Andrew Cagney
Date: Tue Jan 9 16:10:37 2024 -0500
addconn: update nic-offload= code
- rename <> to <>
- make enums upper-case with NIC_OFFLOAD_ prefix
fixing: Use lower case to avo
New commits:
commit e93477387cac3ddf86e6910405bf6fc79ece6ba6
Author: Andrew Cagney
Date: Tue Jan 9 15:38:44 2024 -0500
testing kvm: drop timeout param to virsh.py code
never changes
___
Swan-commit mailing list
Swan-commit
New commits:
commit 5b8ef37fc34d233cdd8521361a586e4ec811d996
Author: Andrew Cagney
Date: Tue Jan 9 10:20:34 2024 -0500
kernel: call clear_connection_spd_conflicts() in
install_outbound_ipsec_kernel_policies()
So it is closer to get_connection_spd_conflict
On Mon, 8 Jan 2024 at 15:56, Paul Wouters wrote:
>
> This likely depends on the crypto policies set.
> And yes 1024 is probably no longer allowed.
>
> You can try: update-crypto-policies —set LEGACY
Yes.
Between 4.6 and 4.7, and as part of the digital signature work, some
of the crypto code was
New commits:
commit af3f240563e612eca98fc283a81f1bfcf5efc4eb
Author: Andrew Cagney
Date: Sun Jan 7 11:25:48 2024 -0500
testing web: s/repodir/rutdir/ s/makedir/benchdir/
more in-line with other code
___
Swan-commit mailing list
Swan
New commits:
commit e1c565c5adf6ea79bbd1520f8d91bf800c4735ba
Author: Andrew Cagney
Date: Sun Jan 7 11:17:09 2024 -0500
testing web: be more agressive when deleting .log files
commit 9739f368a61cb5510f73bbcee2b725d631189208
Author: Andrew Cagney
Date: Sun Jan 7 11:02:51 2024 -0500
New commits:
commit ac13e0cb4c7c00457f5ad420d8d2c77554a3b8fd
Author: Andrew Cagney
Date: Sun Jan 7 08:56:27 2024 -0500
testing kvm: upgrade NetBSD to 10.0_RC2
Fix #1513
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 5c6d4c834697f71cb611ae67d5f4a9bf668ecd10
Author: Andrew Cagney
Date: Sun Jan 7 08:12:48 2024 -0500
testing: remove redundant sed line
There's already a slightly weaker version of the same sed line
vis:
# filter out ipsec auto deprecation warning
New commits:
commit 8b0d14c0ec0db2d99a017bca9dea3076326500ce
Author: Andrew Cagney
Date: Mon Jan 1 18:51:21 2024 -0500
ikev2: use connection_delete_child() when IKE_AUTH fails
... not delete_child_sa(); ref #1508
___
Swan-commit mailing
New commits:
commit 3bdebc011cf4eaced7d0ec455326617d131c3bc0
Author: Andrew Cagney
Date: Mon Jan 1 13:35:48 2024 -0500
testing: add
impair-install-{inbound,outbound}-ipsec-sa-{initiator,responder}-ikev{1,2}
see #1508
___
Swan-commit
New commits:
commit 0653b5095d810a8986e212ec3dc244bc027f3ff8
Author: Andrew Cagney
Date: Mon Jan 1 09:46:06 2024 -0500
impair: add --impair install_{inbound,outbound}_ipsec_sa
ref #1508
___
Swan-commit mailing list
Swan-commit
New commits:
commit f50218225d6e7fefb5a472858f06c487ac6cc4eb
Author: Andrew Cagney
Date: Sun Dec 31 16:12:44 2023 -0500
routing: handle RESCHEDULE, ROUTED_NEGOTIATION, INSTANCE
fix #1509
___
Swan-commit mailing list
Swan-commit
New commits:
commit 03ca0ef8d356262ffab4f1132bab2d65df0cfc37
Author: Andrew Cagney
Date: Sun Dec 31 16:10:04 2023 -0500
building: fix "make distclean html" - was skipping mkdir
i.e., building only html on a clean repo
___
S
New commits:
commit 79c847202d87633bac84e79d832114d7ee8c18f8
Author: Andrew Cagney
Date: Sun Dec 31 12:47:12 2023 -0500
ipsec connectionstatus: "encaps:" -> "encapsulation:..."
match config name; not old whack --option
mor
New commits:
commit 08d88650075097ffe0b2f456fc4d31a737c544c1
Author: Andrew Cagney
Date: Sun Dec 31 15:27:05 2023 -0500
testing: robustify ikev2-xfrmi-16-rekey
- stop tcpdump ipsec1 synchronously
re-adding the connection was deleting ipsec1 leading to
an asynchronous
New commits:
commit ce54845454c50e24cfc09427b079d12465781aa7
Author: Andrew Cagney
Date: Sun Dec 31 14:50:42 2023 -0500
testing kvm: implement <<./kvm {kill,status}>> directly
drop <>
ref #1501
___
Swan-commit
New commits:
commit ceb628c7905cc93a475b751edcbc6692787d9f73
Author: Andrew Cagney
Date: Fri Sep 29 13:56:19 2023 -0400
foodgroups: use terminate_and_delete_connections() for group-instance
commit ef8c7d06cbbd00d8c2b1ad1b41019ee830db2c74
Author: Andrew Cagney
Date: Mon Dec 11 09:45:32
New commits:
commit 24f29a8d7e4f711f02f180330e763c9e85c191d2
Author: Andrew Cagney
Date: Sun Dec 31 10:36:16 2023 -0500
logging: include caller in whack delref log
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 29c9c7d1d4346605a25b99fcce9d826d842342e4
Author: Andrew Cagney
Date: Fri Sep 29 14:44:24 2023 -0400
ipsec shutdown: add/use use terminate_and_delete_connections()
Delete connections top down, like <> does.
Replace whack_delete_conne
New commits:
commit 443f962f11738df980e5ed8dee32f8f7af8cc6ff
Author: Andrew Cagney
Date: Mon Dec 11 11:17:44 2023 -0500
orient: make caller responsible for holding a reference
Use terminate_and_down_connection() since re-orient is bottom up
New commits:
commit a63c25ad51624907c40298d06973dba960e55d82
Author: Andrew Cagney
Date: Wed Nov 22 22:15:05 2023 -0500
kernel: drop connection .wip .conflicting .owner
instead use local variable
___
Swan-commit mailing list
Swan-commit
New commits:
commit c2192b43a015f91b56603e571bf54fdff6ff9c80
Author: Andrew Cagney
Date: Wed Nov 22 17:48:16 2023 -0500
routing: merge spd_owner .policy and .eclipsed
fix #1447
___
Swan-commit mailing list
Swan-commit
New commits:
commit f9e34034120d8239eccac8ea203c475354be9cde
Author: Andrew Cagney
Date: Sat Dec 30 17:49:33 2023 -0500
testing: update ikev2-xfrmi-16-rekey to match KVM's output
so it has what the testing machine expects
somewhat workaround #1505
commit
New commits:
commit 2b00afbbc2116645ea2a32111e3918582b94070f
Author: Andrew Cagney
Date: Sat Dec 30 10:26:05 2023 -0500
testing: update interop-ikev2-strongswan-14-delete-sa-shared
don't expect "SPIs " to turn into "SPIs: "
follow-up:
testin
New commits:
commit 6a9f91ee7ad33c0ccc51c64f2c94090f04f54237
Author: Andrew Cagney
Date: Fri Dec 29 14:06:13 2023 -0500
testing: add ipsec-kernel.sh; make ipsec-kernel-{state,policy}.sh wrappers
The front end of ipsec-kernel-{state,policy}.sh was identical.
ref #1496
commit
New commits:
commit b2a07e4ad1c3b2039a51b1053bac3c4bd72770d8
Author: Andrew Cagney
Date: Fri Dec 29 11:28:51 2023 -0500
pervasive: drop <<#define st_logger logger>> hack
.st_logger was renamed to .logger some time ago
commit 1b3ec158e93f658ef04b81ddebcb6d29140d83ac
Au
New commits:
commit a527e8dc5b0a3a30711762fcec551119eaf4ff95
Author: Andrew Cagney
Date: Thu Dec 28 11:40:39 2023 -0500
building: dump #ifndef USE_CAT message about cat being disabled
It's printed for left/right on every connection load. Even though
"cat=" i
New commits:
commit f328f21d71d345cad9ad80bef22e9bbab9723112
Author: Andrew Cagney
Date: Thu Dec 28 11:35:06 2023 -0500
testing web: backoff when "make distclean" fails
fix #1499
___
Swan-commit mailing list
S
New commits:
commit bf377ded9d8659e63be70415506acf5f9ba9104e
Author: Andrew Cagney
Date: Thu Dec 28 11:23:13 2023 -0500
building: drop Ubuntu 18.04 LTS (Bionic Beaver)
expired in April 2023; fix #1462
___
Swan-commit mailing list
Swan
New commits:
commit b467b2994b346bd89615c1a9080e0407d1bca0e4
Author: Andrew Cagney
Date: Thu Dec 28 11:09:20 2023 -0500
testing kvm: make ISO download bar terse
it should print a dot for every meg of download
fix #1471
___
Swan
New commits:
commit 6c804f5e005856f40939c6a9265402f8093ed616
Author: Andrew Cagney
Date: Thu Dec 28 10:53:42 2023 -0500
building kvm: fix KVM_DEBIAN_RELEASE and KVM_DEBIAN_URL
point into the archives which don't move around as much
fix #1477
New commits:
commit 6d116ca7eefe59e6d7a0d371eb919c8090bbd654
Author: Andrew Cagney
Date: Wed Dec 27 22:55:34 2023 -0500
pluto: remove forceencaps from comments/debug lines
ref #1493
commit 97db016fad7b67a824b235041d9028095551b36c
Author: Andrew Cagney
Date: Wed Dec 27 22:55:06
New commits:
commit 9f3d3d31dc83fe3070449d9c549371ac90113122
Author: Andrew Cagney
Date: Wed Dec 27 23:10:55 2023 -0500
documentation: in libreswan.7 drop section on whack
already in ipsec-whack.8
Leave examples which need serious overhaul
> But I've removed the #ifdef around here and only have a single ifdef
> at the only place in the code that sets has_client_address_translation,
> and so the ifdef on this location is not needed.
That is more robust. The less #ifdef-s the better.
___
New commits:
commit bc9d6d961ac82de831993cb18b3004d01c7ef534
Author: Andrew Cagney
Date: Wed Dec 27 11:55:14 2023 -0500
testing netbsd: set ddb.lines=0; overiding 24-line default
It's a bit tricky as there's no way to do it from the boot line.
fix #1476
New commits:
commit 5e0cad27e1d087341972ea9e30dd1b788ed54742
Author: Andrew Cagney
Date: Tue Dec 26 15:19:55 2023 -0500
building: re-order / update USE_{NFLOG,CAT,IPTABLES,NFTABLES}
- set all fields and then check for conflicts
- move the transforms to where each variable
> building: do not abuse USE_IPTABLES or USE_NFTABLES
> building: add sanity check for USE_CAT and USE_NFLOG
> building: fix logics in sanity check
> building: when USE_NFLOG is disabled, disable it really
> ... with more to come ...
for instance, see attached:
diff --git a/mk/config.mk
New commits:
commit fe203eb70688a41aaa78599ac022dee83e2f4e0b
Author: Andrew Cagney
Date: Sun Dec 24 21:35:27 2023 -0500
testing: update freebsd - drop initial ping
It was expecting the wrong result which fping 5.0 would produce.
Upstream needs to update their fping to 5.1
We've started pushing more stuff into mainline, which for all
Looking over the commits since:
documentation: more README.md tweaks
7312fe13a454e81b167c83d85d1e6dab33777906
This group are straight forward doco updates:
documentation: use @@IPSEC_CONFDDIR@@ and not @@IPSEC__CONFDDIR@@
On Tue, 19 Dec 2023 at 09:32, Bill Atwood wrote:
>
> Paul, Brady,
>
> On 12/18/2023 9:42 PM, Paul Wouters wrote:
> > * 4a936b2aad - The XFRM address scope must be global (12 hours ago)
> >
>
> While this constraint must be true for the current XFRM (it does not
> understand that Link-Local
On Sun, 24 Dec 2023 at 19:02, Andrew Cagney wrote:
>
> On Sun, 24 Dec 2023 at 16:55, Paul Wouters wrote:
> >
> > New commits:
> > commit 52c5cecda7543c4910a075a68e684469bacbbbd7
> > Author: Paul Wouters
> > Date: Sun Dec 24 16:51:45 2023 -0500
> >
&
On Sun, 24 Dec 2023 at 16:55, Paul Wouters wrote:
>
> New commits:
> commit 52c5cecda7543c4910a075a68e684469bacbbbd7
> Author: Paul Wouters
> Date: Sun Dec 24 16:51:45 2023 -0500
>
> building: do not abuse USE_IPTABLES or USE_NFTABLES
>
> These defines were misused to see if we were
New commits:
commit c3c4e96b88a681082556ef467e9081ae05af5903
Author: Andrew Cagney
Date: Sun Dec 24 17:59:39 2023 -0500
building freebsd: use GNU sed when transforming
Default sed doesn't support in-line.
Now:
documentation/man: fix transformation for IPSEC_SECRETS
New commits:
commit 1c5f9ae6c7c748713ad8a695987d17e4057e5307
Author: Andrew Cagney
Date: Tue Dec 5 19:45:10 2023 -0500
testing: drop notvalidanymore cert, unused
The groundhog tests, for instance, build custom certs with
expiry dates relative to when the test is run. Not some
New commits:
commit 297db16b09f84ec9ceada96b45bb840527e60c60
Author: Andrew Cagney
Date: Tue Dec 5 19:29:43 2023 -0500
x509: log more details when cert add fails
notably, include ID in error; follow up:
x509: unpack IPv6 general names based on length
adding more details
New commits:
commit 0b4495d493a9b0d6d6ce252e575f2bb399292abe
Author: Andrew Cagney
Date: Fri Dec 22 17:56:08 2023 -0500
documentation: update .man rule, fix substutions in includes
merge with ipsec.conf.5 rule
___
Swan-commit mailing
New commits:
commit aea5c3e6aa4d1659937d741871b5192b5b421831
Author: Andrew Cagney
Date: Fri Dec 22 17:24:54 2023 -0500
documentation: update html rule; fix substitution when including
merges custom ipsec.conf.5 rule; fixes @@ in ipsec.secrets.5.html
(ipsec.secrets.5 has same
New commits:
commit 96d1327aac16ae1532201b910a6ab9fffc29d1c4
Author: Andrew Cagney
Date: Fri Dec 22 16:45:44 2023 -0500
documentation: fix typo in ipsec-pluto.8 - @@{IPSEC_,}RUNDIR@@
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit 21ca06cff43f1d20fe3b2525471e234934de8996
Author: Andrew Cagney
Date: Fri Dec 22 16:42:46 2023 -0500
documentation: fix typo in ipsec-pluto.8 - IPSEC_CONF{,D}DIR
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit 8be6d002763880bc5733d21884bd4b3378957dbf
Author: Andrew Cagney
Date: Thu Dec 21 16:58:23 2023 -0500
documentation: use ENTITY includes to build ipsec.conf.5.xml
- add top-level ipsec.conf.5.xml file
- use XML ENTITYs to include sub .xml files
- make
New commits:
commit ef0b26de5dd6551fe8531ab87299a68cb37eacc4
Author: Andrew Cagney
Date: Fri Dec 22 16:04:03 2023 -0500
documentation: use @@IPSEC_CONFDDIR@@ and not @@IPSEC__CONFDDIR@@
___
Swan-commit mailing list
Swan-commit
FYI,
The documentation has been given a slight refresh, hopefully
addressing the points you made below.
As for debian and xml, if the problem is still there can you file a bug.
Andrew
On Wed, 13 Sept 2023 at 15:56, Bill Atwood wrote:
>
> Applicable to version 4.12 tarball
>
> In README.md
>
>
New commits:
commit 7312fe13a454e81b167c83d85d1e6dab33777906
Author: Andrew Cagney
Date: Tue Dec 19 11:46:39 2023 -0500
documentation: more README.md tweaks
apparently code examples need two or four spaces
___
Swan-commit mailing list
New commits:
commit 6ae63f97d362c3c383d0d7a452e388ee93142938
Author: Andrew Cagney
Date: Tue Dec 19 11:19:40 2023 -0500
documentation: for --rsasigkey drop reference to ttodata()
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit a8fb4048eff8a94aaff79bb5ae13004f47e7d462
Author: Andrew Cagney
Date: Tue Dec 19 11:17:00 2023 -0500
documentation: update rsasigkey, remove reference to ttodata()
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit d87729ad3093db431290eb5aa7ed9271f26408e4
Author: Andrew Cagney
Date: Tue Dec 19 10:27:55 2023 -0500
documentation: update README.md and INSTALL
- change INSTALL to just point at README.md
- fix (hopefully) some of the code indents
- adjust paragraph
On Mon, 18 Dec 2023 at 21:42, Paul Wouters wrote:
>
> On Mon, 18 Dec 2023, Andrew Cagney wrote:
>
> >> Is there a reason why git head shouldn’t all go in?
> >
> > git head is at v5.0rc1
>
> No?
Tuomo and I cleared the backlog yesterday morning. Which w
New commits:
commit 972d9406d3182bd7c0200f7eee715ec9a662c9b1
Author: Andrew Cagney
Date: Mon Dec 18 14:55:10 2023 -0500
documentation: update dependencies listed in README.md
And remove references to <> and <>.
Ref #1494
New commits:
commit 535e6fd9d203ae57c73bc197db117e1a09a5d0a2
Author: Andrew Cagney
Date: Mon Dec 18 13:56:12 2023 -0500
documentation: in README.md, specify <> and not <>
File needs an overhaul.
___
Swan-commit mailing list
601 - 700 of 10905 matches
Mail list logo
