New commits:
commit 37e5216e71665ca97756726344c7ee73b926b43b
Author: Andrew Cagney
Date: Wed Nov 22 15:39:26 2023 -0500
show: drop 000 prefix on ipsec status output
but not other output for now; ref #1421
commit 77e76969a869fb856b364e109571268122bba91c
Author: Andrew Cagney
Date
New commits:
commit e1ade76f75eada4fbc95bfaf30465c8337a3eaef
Author: Andrew Cagney
Date: Wed Nov 22 15:25:17 2023 -0500
show: drop RC parameter to SHOW_JAMBUF()
commit f3bcd1d301ff83b8845cd8cbfaa29c4f8ef5f7a4
Author: Andrew Cagney
Date: Wed Nov 22 15:18:58 2023 -0500
ipsec
New commits:
commit 512db03eda1d9f6a806d9311515544aca005801e
Author: Andrew Cagney
Date: Wed Nov 22 12:37:31 2023 -0500
testing: ipsec--NN* -> whack--NN*
since whack is what underpins the ipsec script; and all the
source code refers to wha
New commits:
commit 11f1daa524fa452590c24a4fe16e41304484de94
Author: Andrew Cagney
Date: Wed Nov 22 07:35:50 2023 -0500
connections: change directional -> to unidirectional === for policy
commit ab3c6c4bd3d7e3d2f67ee81cd340ae34ffe23d0d
Author: Andrew Cagney
Date: Wed Nov 22 08:00
New commits:
commit cce8c58929a560b0797e1e6af87dc1593581e6d3
Author: Andrew Cagney
Date: Wed Nov 22 08:24:08 2023 -0500
connections: jam_spd() -> jam_spd_topology(), make static
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
ht
New commits:
commit 938087dd4e21476879d4b1ff2278c8c3980da6bc
Author: Andrew Cagney
Date: Tue Nov 21 17:16:04 2023 -0500
ikev2: simplify selector when logging established
instead of:
1.2.3.0-1.2.3.255:0-65535 0
use
1.2.3.0/24
fix #1418
commit
New commits:
commit 7fcebde37d419a542e227d5f3b904a83c2fb17a4
Author: Andrew Cagney
Date: Tue Nov 21 14:45:31 2023 -0500
ip: log selector as ADDRESS/MASK/PROTO/PORT
with optional bits omitted; for instance:
1.2.3.4/32/tcp/22
fix #1361
commit
New commits:
commit c69944ecd1b880e220badc4de5ba4ff14411a897
Author: Andrew Cagney
Date: Tue Nov 21 15:55:36 2023 -0500
testing: tweak connalias-01-conflict
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org
New commits:
commit 8d7840511d0c33cfca63b967615404b9f3e7382f
Author: Andrew Cagney
Date: Tue Nov 21 14:21:44 2023 -0500
routing: drop pexpect() that a conflict has its policy installed
For instance a negotiating connection that hasn't yet
installed its policy should still
New commits:
commit 0c218c31182ec4b5964e931118cca2949f18df43
Author: Andrew Cagney
Date: Tue Nov 21 13:20:07 2023 -0500
routing: weaken pexpect() that unrouted connection has no owner
An UNROUTED connection (i.e., no Child SA) can
still have an IKE SA, just as long as that IKE
New commits:
commit ec65b8fdc43b94f54c51731b46444c12a508c1be
Author: Andrew Cagney
Date: Tue Nov 21 13:13:15 2023 -0500
testing: make connalias-02-twoconn-ikev[12] good
close #1415
___
Swan-commit mailing list
Swan-commit
New commits:
commit 701c85b07d5cc13f80b6cac8b631109f16565080
Author: Andrew Cagney
Date: Tue Nov 21 11:10:14 2023 -0500
ipsec *: log <> instead of <>
the config option name is connalias= and not alias=
commit 56a6fd3daca18d2deaacae09a7b89ca364b24239
Author: Andrew
New commits:
commit 74ea29f5ab6dd40013a338efc136eb9488ceba24
Author: Andrew Cagney
Date: Tue Nov 21 10:42:20 2023 -0500
testing: add real connalias= tests
ref #1415
ref #1412
___
Swan-commit mailing list
Swan-commit
- Now implemented in c-code in the whack binary
Signed-off-by: Brady Johnson
Signed-off-by: Andrew Cagney
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit
New commits:
commit 68481fa38a0f10103e35e756a5481d37a026efc7
Author: Andrew Cagney
Date: Tue Nov 21 07:48:37 2023 -0500
kernel: tweak spd_owner() logs
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org
New commits:
commit ffe9867b54944e7344e6a7e1f71e01bed2f26171
Author: Andrew Cagney
Date: Mon Nov 20 19:03:16 2023 -0500
testing: magic up output for alias-01
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 188a222d9702db265161bcf22ce53605f807de2a
Author: Andrew Cagney
Date: Mon Nov 20 14:27:43 2023 -0500
kernel: pass new_routing in to install_outbound_ipsec_kernel_policies()
and from there to spd_owner(); rather than RT_UNROUTED+1
commit
New commits:
commit e13fa203eeab555991a57a5e27824c0ff365ed62
Author: Andrew Cagney
Date: Mon Nov 20 15:35:50 2023 -0500
kernel: in install_inbound_ipsec_sa() ignore sec-label conflicts
lost by:
kernel: in install_inbound_ipsec_sa() simplify policy confict check
New commits:
commit 54b1aae9995b32dbc2906c39e4767c1ca1896569
Author: Andrew Cagney
Date: Mon Nov 20 12:56:08 2023 -0500
kernel: in install_inbound_ipsec_sa() simplify policy confict check
just check for policy
___
Swan-commit mailing
New commits:
commit 5ec0be40f2dd10a0d8fde23723c39b4ff5c06d5b
Author: Andrew Cagney
Date: Mon Nov 20 13:25:05 2023 -0500
kernel: drop .grp_sa(), always NULL, must have been a KLIPS thing
___
Swan-commit mailing list
Swan-commit
New commits:
commit 73a7156a301c8f2020e5bc1f6f9a86effe5d3a93
Author: Andrew Cagney
Date: Mon Nov 20 10:50:27 2023 -0500
kernel: use get_connection_spd_conflict() in for-spd loops
commit bd9f013ff955fd7851fba178903cd7f679624b62
Author: Andrew Cagney
Date: Mon Nov 20 09:58:14 2023 -0500
New commits:
commit 59c72e9438f93a70626cad1fcfafd78b37b295e6
Author: Andrew Cagney
Date: Mon Nov 20 10:18:04 2023 -0500
kernel: in install_inbound_ipsec_sa() bail when conficts
Use get_connection_spd_conflicts() to check for policy
conflicts but only use the yes/no result (all
New commits:
commit 37b1f574d81dfae512f5739207312e1794aa7bbe
Author: Andrew Cagney
Date: Mon Nov 20 08:37:51 2023 -0500
updown: sprinkle struct child_sa
commit ceb282d4a0f33de8eac11d4f21cb652ab62fcefd
Author: Andrew Cagney
Date: Mon Nov 20 08:01:40 2023 -0500
kernel: sprinkle
On Mon, 20 Nov 2023 at 05:14, Brady Johnson wrote:
>
> Andrew pointed out a use case that is not covered yet, which is "transport
> mode when host==client". This is caused by the following check in the
> jam_end_client() function:
>
> if (selector_eq_address(this->client, this->host->addr)) {
>
New commits:
commit be5def8ecc2e9c0778710ff07767534c8199967c
Author: Andrew Cagney
Date: Sun Nov 19 16:49:47 2023 -0500
kernel: merge spd install loops
commit 8fa2e43a9c942890bd984b4459a1963bf5600e17
Author: Andrew Cagney
Date: Mon Nov 20 07:49:43 2023 -0500
testing: expect one
New commits:
commit c86d0c7412751582bd5c6b5289e5b7a023b8c81e
Author: Andrew Cagney
Date: Sun Nov 19 13:34:08 2023 -0500
kernel: in install_outbound_ipsec_kernel_policies() clear SPD clashes
commit 83d1616c1f0c4d3fdd442f778a5f6c8bde4741a6
Author: Andrew Cagney
Date: Sun Nov 19 12:32:12
New commits:
commit 72bc3f758b94fec7ef47ac2d6615ff0ffef4b8ef
Author: Andrew Cagney
Date: Sat Nov 18 14:39:51 2023 -0500
testing: initiating ... updates
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org
New commits:
commit 825e46f7eab99f4c5a37e8e0e7ed45547c80e4ca
Author: Andrew Cagney
Date: Fri Nov 17 18:00:19 2023 -0500
ikev2: initiating IKEv2 connection to ... using TCP
or ... UDP; fix #1398
commit 48b4bff2dfbe18a409a54dcf664be72f0815b05d
Author: Andrew Cagney
Date: Fri Nov
New commits:
commit 5118e92bfa50706374158ee8a32b479c83542e60
Author: Andrew Cagney
Date: Fri Nov 17 17:29:04 2023 -0500
state: pass endpoints into new_state(); reject UDP+listen-udp=no
fix #1391
___
Swan-commit mailing list
Swan-commit
New commits:
commit 8acc591110a4a280046208def5cca3486e93724b
Author: Andrew Cagney
Date: Fri Nov 17 15:32:24 2023 -0500
routing: tone down crossing-streams error message
don't pexpect; #1411
___
Swan-commit mailing list
Swan-commit
New commits:
commit c4dad09e0e54ce8dd460ee6414f59f62c26e33fb
Author: Andrew Cagney
Date: Fri Nov 17 12:20:06 2023 -0500
ipsec portexcludes: move to contrib/, update CHANGES
fix #776
___
Swan-commit mailing list
Swan-commit
New commits:
commit 593917d84559ba687c0f281133df808221cf947e
Author: Andrew Cagney
Date: Fri Nov 17 09:47:29 2023 -0500
orient: drop code maintaining the custom .host_pair / .hp_next
commit 29c1eb28fbb955cb098fd8c122e39333b2117032
Author: Andrew Cagney
Date: Mon Nov 13 21:37:39 2023
New commits:
commit 443645754b15f6377efd0e4523e5826a571936cd
Author: Andrew Cagney
Date: Thu Nov 16 21:05:27 2023 -0500
orient: simplify check_orientations()
just walk through connections using a single pass and then
disorient() followed by orient
New commits:
commit 164c1a2d4d9b3c62fc57d7bc0a8b68deb23a31f8
Author: Andrew Cagney
Date: Thu Nov 16 15:51:56 2023 -0500
ddns: drop call to check_orientations()
The code in connection_check_ddns1() is already re-orienting
any connections with an address change.
ref
New commits:
commit 4b74087e4b8fc1bf28c441e028bcc4c3fc092fda
Author: Andrew Cagney
Date: Thu Nov 16 15:28:47 2023 -0500
ddns: handle re-orienting and re-routing locally
Drop update_host_pair() call, to add to "???"'s comments:
- it was trying to avoid DNS lo
New commits:
commit f2b96a69165d411bc40d6a38b019049afb78ddda
Author: Andrew Cagney
Date: Thu Nov 16 14:24:17 2023 -0500
labeled IPsec: when deleting IKE SA, delete on-demand policy
For the transition TEARDOWN_IKE, ROUTED_ONDEMAND, LABELED_PARENT
delete the on-demand policy
New commits:
commit 0b9c08858fbc4e77977270ff8016e7b4718e2bfd
Author: Andrew Cagney
Date: Thu Nov 16 14:10:51 2023 -0500
labeled IPsec: drop connection_route() hack during IKE_AUTH
... installing and routing an on-demand policy.
Instead install the on-demand policy as part
New commits:
commit 5588b29da1671f8151edbd38548d97e16d40937f
Author: Andrew Cagney
Date: Wed Nov 15 23:35:25 2023 -0500
events: shuffle state_event_slot()'s big switch
commit 34385814d434970579d2b806acfbd96ab59db13f
Author: Andrew Cagney
Date: Wed Nov 15 23:22:50 2023 -0500
New commits:
commit a70906a54aac653d9551fab208687990132f9b60
Author: Andrew Cagney
Date: Thu Nov 16 08:27:50 2023 -0500
ipsec briefconnectionstatus: move code to whack_briefconnectionstatus.[hc]
commit 89346e496263e1187bb7f08b097fd66cdbc6b81e
Author: Brady Johnson
Date: Fri Oct 27 13
New commits:
commit 103040bd1fc5bb64304b33aebd3be4b0be4d3f67
Author: Andrew Cagney
Date: Thu Nov 16 07:47:31 2023 -0500
initiate: use connect_to_oriented() to hook up connection
... rather than fiddling with .hp_next
Delete mistaken "stick after parent on list.&quo
New commits:
commit dbcb3d483be431390dba45086fdf3570e1d0813e
Author: Andrew Cagney
Date: Wed Nov 15 22:49:39 2023 -0500
testing: update ikev2-rw-multiple-subnets-4-mismatch
pending order changed
___
Swan-commit mailing list
Swan-commit
New commits:
commit add71fee00af30de8abe4d202e1bc710129f3192
Author: Andrew Cagney
Date: Wed Nov 15 20:23:55 2023 -0500
connections: call connection_routing_init() from alloc_connection()
i.e., only one place
___
Swan-commit mailing
New commits:
commit 5aa80ae185f3eddfd4df7fc2776b802f7caafedc
Author: Andrew Cagney
Date: Wed Nov 15 19:50:10 2023 -0500
events: split EVENT_SA_DISCARD into EVENT_v[12]_DISCARD
commit 5dba7c84119f02f420aac2ecf324287873b2e4c5
Author: Andrew Cagney
Date: Wed Nov 15 19:49:53 2023 -0500
New commits:
commit e6e8bffd5af0fed99af237a17f54c8c85d2a01de
Author: Andrew Cagney
Date: Wed Nov 15 08:46:24 2023 -0500
connections: turn parent_ok() into connections_can_share_parent()
clarify when to connections can be shared; ref #1405
commit
New commits:
commit 7d5616648a12798d98dc3289729f75bf5ea55715
Author: Andrew Cagney
Date: Wed Nov 15 09:31:42 2023 -0500
events: split EVENT_SA_EXPIRE into EVENT_v[12]_EXPIRE
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 93c6ba80d404cefb3e3eca4af2f4481bac81673b
Author: Andrew Cagney
Date: Wed Nov 15 09:52:02 2023 -0500
testing: update <> pending list
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libresw
New commits:
commit d1ce583e25be20ab3e3703b835654c7a2781b7f6
Author: Andrew Cagney
Date: Tue Nov 14 17:18:34 2023 -0500
kernel: use expired[] array indexed by enum sa_expire_kind
that is:
struct ipsec_flow .expired[]
struct ike_info .expired_event[]
the latter
New commits:
commit 2a5b2cbf2035f91cc85f4c154b538dcaeeedd8da
Author: Andrew Cagney
Date: Wed Nov 15 07:30:06 2023 -0500
pervasive: don't #include "host_pair.h" when not needed
commit 5053f06ffdf5363658bf02a5afe0195246058892
Author: Andrew Cagney
Date: Mon Nov 13 21:36:57
New commits:
commit 3ce6980c059443fbac31a5387589707ea8b0e57d
Author: Andrew Cagney
Date: Wed Nov 15 07:08:58 2023 -0500
pending: drop EVENT_PENDING_PHASE2 reviving lost connection
In v5.x the pending list is directly attached to the IKE SA, so when
that dies they are always
New commits:
commit 5d25985ecc9d6b7977f41a7d840ecfbaff852a63
Author: Andrew Cagney
Date: Tue Nov 14 18:30:34 2023 -0500
testing: try robustifying ikev2-child-ipsec-replace-ike
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit a5e12e9373671bc5a6808c05e75f409d2a93c5b5
Author: Andrew Cagney
Date: Tue Nov 14 14:57:21 2023 -0500
ikev2: drop REAUTH event stub
close #1278; instead REPLACE event will do full authenticate
see #1400
___
Swan
New commits:
commit 7e22ac55b67f4b6f7ac921e058b0e231b2eab47a
Author: Andrew Cagney
Date: Tue Nov 14 07:59:17 2023 -0500
testing: update redirect tests
commit 60c4ce15bee4b97fff615f7b3ca78065b964a35d
Author: Andrew Cagney
Date: Mon Nov 13 20:56:36 2023 -0500
redirect: use revival
New commits:
commit 5f04bdd4b3078c0ab8eed8a412fab5c76d796f2c
Author: Andrew Cagney
Date: Sun Nov 12 21:06:35 2023 -0500
ikev2: fix comment describing case STF_OK_INITIATOR_DELETE_IKE:
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit 0ee12cc7f6b8e605b04a6aebed74abb95c971b8d
Author: Andrew Cagney
Date: Mon Nov 13 09:48:46 2023 -0500
testing: update wip redirect tests
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org
New commits:
commit e63302bdf1cc3b028a55733976c27272171ef0e0
Author: Andrew Cagney
Date: Thu Nov 9 13:04:04 2023 -0500
connections: in discard_connection(), disorient() before deleting HP
___
Swan-commit mailing list
Swan-commit
New commits:
commit 63511020fcd33ad74842dc3c07defcaa67d4cdff
Author: Andrew Cagney
Date: Sun Nov 12 11:01:43 2023 -0500
testing: don't expect revival during redirect
see #1396
commit e81fc8b9d4a1a42d2f7d31da504b64067f3ed1e9
Author: Andrew Cagney
Date: Sun Nov 12 10:56:12 2023
New commits:
commit 1d0f0138058a43288bdbd9382807586c59b300af
Author: Andrew Cagney
Date: Sat Nov 11 22:31:15 2023 -0500
pending: boot the .pending list out of struct host_pair
Instead each IKE SA keeps its own list of .st_pending connections.
Having .pending in struct
New commits:
commit 6c4ab30fd70fc42ca36b2cb64b8ea0c30783a979
Author: Andrew Cagney
Date: Sat Nov 11 22:23:26 2023 -0500
ipsec showstatus: actually show pending connections
was showing the IKE SA's connection over and over
commit 8384c01bdd6cd3c8d4c8c899f7c94b9f0fc8aba5
Author
New commits:
commit 64d2728b690af3f02c5fffa262a3a6adf1abb5a5
Author: Andrew Cagney
Date: Sat Nov 11 22:51:32 2023 -0500
routing: flag replace as INITIATED_BY_REPLACE
not INITIATED_BY_NONE
commit 8e72e802f2860bec24f9a4b79f5ae9d1715336fb
Author: Andrew Cagney
Date: Sat Nov 11 22
New commits:
commit a83786499ccd3916934ee92e562192f7ca452c6a
Author: Andrew Cagney
Date: Sat Nov 11 11:23:12 2023 -0500
host-pair: fix typo in passert
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org
New commits:
commit bf5dd9594d45d57d151a20a4b8169897909ad1d0
Author: Andrew Cagney
Date: Fri Nov 10 20:24:56 2023 -0500
testing kvm: add KVM_RUN_POST_MORTEM=[true]
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 44863b72bdc096912c4b2837d797d1d102fed70a
Author: Andrew Cagney
Date: Fri Nov 10 15:03:16 2023 -0500
host_pair: dump more details when a bare host-pair has pending
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit 30c786664929ca4010b20991cfcc2aa6e292e15e
Author: Andrew Cagney
Date: Fri Nov 10 13:20:00 2023 -0500
testing: add ikev2-redirect-04-down-{auth,global} ref #1369
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit 6132fe0deea8e525bafc65e239b71f76b57ec599
Author: Andrew Cagney
Date: Fri Nov 10 14:07:53 2023 -0500
NAT: in nat_traversal_update_family_mapp_state() rehash host-pairs
fix #1394
___
Swan-commit mailing list
Swan
New commits:
commit b62e55404d9ec46c1b4e6a40d2223e804f1670a8
Author: Andrew Cagney
Date: Fri Nov 10 11:16:07 2023 -0500
orient: inline connect_to_host_pair()
Make choice between connect_to_{un,}oriented() clear and in
some cases just call connect_to_oriented
New commits:
commit 8ee77ca953968afdee7868a3560153b5f3cdbf22
Author: Andrew Cagney
Date: Thu Nov 9 20:48:40 2023 -0500
connections: merge finish_connection() into alloc_connection()
update *instantiate() code
___
Swan-commit mailing
New commits:
commit 2e9f297550457345ce49acb9d7b8c1ecccee8f4b
Author: Andrew Cagney
Date: Thu Nov 9 21:52:34 2023 -0500
mobike: force full re-orient so that DBs and .iface update
fix #1393
commit 66239036862fb7cbd7f230debe75dad667ba0fd6
Author: Andrew Cagney
Date: Thu Nov 9 22
New commits:
commit 688bcfed3bad95ddc90d5c53c21f8a51bff696f2
Author: Andrew Cagney
Date: Thu Nov 9 21:34:23 2023 -0500
orient: merge orient_1() into orient()
code deals with easier iface rather than iface_endpoint
___
Swan-commit
New commits:
commit 9d81f7565ff3112cbc28c1f6e633e233943a9526
Author: Andrew Cagney
Date: Thu Nov 9 19:45:42 2023 -0500
mobike: move update_mobike_endpoints() to ikev2_mobike.c
make static
___
Swan-commit mailing list
Swan-commit
New commits:
commit 52b1738b98135b0b02b210a9488d9dc12f49939f
Author: Andrew Cagney
Date: Thu Nov 9 16:44:09 2023 -0500
testing: update listen-{tcp,udp} on east tests
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 4d2e355c6b47e2478ee23b77e2fafc236fa16b1d
Author: Andrew Cagney
Date: Thu Nov 9 14:28:17 2023 -0500
iface: clean up all ifaces as well as iface endpoints
was leaking when not listening
___
Swan-commit mailing list
New commits:
commit e941df59e6d4655c10924c459a189c216c999b44
Author: Andrew Cagney
Date: Thu Nov 9 12:40:18 2023 -0500
orient: in disorient() call connect_to_unoriented() directly
commit 42bebf0fef95b30c1b6c8257c31616086a78547a
Author: Andrew Cagney
Date: Thu Nov 9 12:38:32 2023 -0500
New commits:
commit cb650e22f64c1c371b7b89266bdc5cddc5505744
Author: Andrew Cagney
Date: Tue Nov 7 14:41:32 2023 -0500
connections: in clone_connection() use refcnt_alloc()
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 379af08bea3ef90f87d08bbc1d1fbb88df9b759c
Author: Andrew Cagney
Date: Thu Nov 9 11:39:13 2023 -0500
testing kvm: give the downloaded ISO today's date
seems that wget preserves date/time
___
Swan-commit mailing list
New commits:
commit bed03ac5e95adfa0c2d4a701e78354e8e6c8cc5a
Author: Andrew Cagney
Date: Thu Nov 9 10:49:58 2023 -0500
testing kvm: make the ISO a hard dependency
should cause an ISO download to rebuild all the domains
___
Swan-commit
New commits:
commit a68319b2387693456c72f7dde0ebed4cb41483a1
Author: Andrew Cagney
Date: Thu Nov 9 10:20:21 2023 -0500
testing kvm: fix a $(KVM_POOLDIR) vs $(KVM_LOCALDIR) dependency
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit 42db95ae328a3764006b43c4d4e289d6b6b09a95
Author: Andrew Cagney
Date: Wed Nov 8 16:08:47 2023 -0500
testing fedora: update addconn-23-system-crypto-policies to f39
fix #1389
commit 1e658e532d3cdb70d91a6687305474d2e4d258d8
Author: Andrew Cagney
Date: Wed Nov
New commits:
commit 449c4d0e83ca9c08ab01788177d563fc16d18344
Author: Andrew Cagney
Date: Tue Nov 7 16:08:39 2023 -0500
connections: when cloning make copying .host_pair+.hp_next explicit
The code adding the new connection to the host-pair DB relies on
this; ewww
New commits:
commit 87b5ddaaf9e1e34a9bd0e2325ae41dfe2ccf2906
Author: Andrew Cagney
Date: Thu Nov 9 07:29:25 2023 -0500
connections: move .ike_window to .config
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 4b50a9be46634f52af2f551a42718d52a33ac452
Author: Andrew Cagney
Date: Thu Nov 9 07:21:00 2023 -0500
orient: in check_orientations() iterate over interfaces
not interface endpoints
___
Swan-commit mailing list
Swan
New commits:
commit 4d2b3ddcdb20c440603b9b153f6cee9ba2106b44
Author: Andrew Cagney
Date: Wed Nov 8 19:39:08 2023 -0500
testing: robustify ikev1-cryptoload-01
use wait-for.sh; estimate nr sleeps was way off
___
Swan-commit mailing list
New commits:
commit a2441867f87fbb316c161e04db4a5972381ea785
Author: Andrew Cagney
Date: Tue Nov 7 16:11:34 2023 -0500
connections: when cloning explicitly initialize .host fields
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit e5e41e111d61040549ee6be9517fbca4316f46f1
Author: Andrew Cagney
Date: Wed Nov 8 14:13:48 2023 -0500
ikev2 tcp: check that the connect worked before creating initiator
ref #1384
___
Swan-commit mailing list
Swan-commit
New commits:
commit c1dae445c60a73b95e00a274fb065e5c77281f98
Author: Andrew Cagney
Date: Wed Nov 8 14:12:44 2023 -0500
instantiate: explictly inherit .up and .route bits
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit e02dd9798785f5e49b19b7d1aab4d73c9e8ad693
Author: Andrew Cagney
Date: Wed Nov 8 12:43:35 2023 -0500
testing: update disoriented messages
commit 0b4a087367bbd79ace7e43a9b63be284bdebe6d2
Author: Andrew Cagney
Date: Wed Nov 8 10:46:58 2023 -0500
orient: orient
New commits:
commit 331ca8f2a2cb8b3206febe7d91ded926f7e2
Author: Andrew Cagney
Date: Wed Nov 8 12:22:24 2023 -0500
building: replace IS_XFRMI with #ifdef USE_XFRM_INTERFACE
fix #1385; bigger problem is #1386
___
Swan-commit mailing
New commits:
commit 2bc961846028b7446d760080ebf79569a7522a09
Author: Andrew Cagney
Date: Wed Nov 8 12:29:45 2023 -0500
instantiate: in clone_connection() explicitly copy/log .has_client
templates probably don't use the bit but their instances do
New commits:
commit 6abf50df2e2b1fabf390b90b1e486d13a6fb86dd
Author: Andrew Cagney
Date: Wed Nov 8 10:39:33 2023 -0500
testing tcp: don't start pluto when sending hand crafted byte streams
Both ikev2-tcp-08-fail-eof and ikev2-tcp-09-fail-timeout
New commits:
commit b1ea4c363cad680b098b63103a61e165183e2a4e
Author: Andrew Cagney
Date: Wed Nov 8 10:35:46 2023 -0500
testing netbsd: update ISO URL - moved and RC1
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https
New commits:
commit 46b28cee9a5255d07330687e45fb23d1ae289cbe
Author: Andrew Cagney
Date: Tue Nov 7 21:36:09 2023 -0500
connections: drop .interface, instead use .iface
Note: orient still plays with both the iface and the
iface endpoint
New commits:
commit 04360182b7028bb5ebf5c056b4744e946a419a6a
Author: Andrew Cagney
Date: Tue Nov 7 15:50:41 2023 -0500
connections: when cloning explicitly zero .child
commit aa9173f3a308b1572d5f64f53e4ad60c4df8ee0b
Author: Andrew Cagney
Date: Tue Nov 7 15:45:40 2023 -0500
New commits:
commit 1aad0e258342d6827b950d666cfd45a6e408c37e
Author: Andrew Cagney
Date: Tue Nov 7 13:45:52 2023 -0500
ikev2: merge TCP fallback code into initialize_new_ike_sa()
Note use of connection .iface and not .interface.
ref #1384
commit
New commits:
commit 7d8128a15b024ca1471cc9c3a489498190698b8d
Author: Andrew Cagney
Date: Mon Nov 6 19:39:54 2023 -0500
connections: add struct iface .iface; set when oriented
unlike .interface this doesn't assume protocol/port, hence
expect .interface to go away
ref
New commits:
commit 52ce272e80cafc405f9e6f7ee93b08f6e8b5802d
Author: Andrew Cagney
Date: Tue Nov 7 12:26:35 2023 -0500
state: use find_iface_endpoint_by_local_endpoint() to get .st_iface_endpoint
... instead of connection .interface
commit ae4305f7b612073dfb5d5f4170852593f87cce46
New commits:
commit 939203f9918e07bc0e1ef9e67024c46c956c0727
Author: Andrew Cagney
Date: Tue Nov 7 08:23:23 2023 -0500
state: rename .st_interface -> .st_iface_endpoint
connection has the interface; state has an endpoint on that
interface
ref #1
New commits:
commit b34724f27aedeccb92fded8b3c8ce80402c7e103
Author: Andrew Cagney
Date: Mon Nov 6 19:39:54 2023 -0500
iface: refresh code
rename struct iface_dev -> struct iface
rename raw_iface -> kernel_iface
rename id_* fields to more meaningful names
name
New commits:
commit 607d1cdb0910f0767fa74390d01d45ab82728ffe
Author: Andrew Cagney
Date: Mon Nov 6 21:52:40 2023 -0500
testing: update ipsec-kernel-policy.sh output
commit 13b1198a8757e2c80031e2161558877f0db2457f
Author: Andrew Cagney
Date: Mon Nov 6 21:49:16 2023 -0500
testing
New commits:
commit 726188387311e48c22e3b635fdcb9f2490257d73
Author: Andrew Cagney
Date: Mon Nov 6 14:31:08 2023 -0500
routing: inline delete_connection_kernel_policies()
... into (new) {un,}routed_kernel_policy_to_unrouted()
eliminate more double spd_owner() calls
New commits:
commit 3a8f4211b8e2057e6e7ccb17270127f7abd0ae84
Author: Andrew Cagney
Date: Mon Nov 6 15:31:58 2023 -0500
state: delete state_eroute_usage(), unused
ref #1380
___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
New commits:
commit 49a4445e6d157d78b1df46e9a12488b3583e6f81
Author: Andrew Cagney
Date: Mon Nov 6 15:00:15 2023 -0500
impair: add helper_thread_delay:N, replace CRYPTO_HELPER_DELAY
for instance:
ipsec pluto --impair helper_thread_delay:10 ...
fix #1373
commit
801 - 900 of 10905 matches
Mail list logo