[Swan-commit] Changes to ref refs/heads/main

2024-02-13 Thread Andrew Cagney via Swan-commit
New commits: commit 8b7ea5a70344f82d9adb0e63c095d39fee58ae01 Author: Andrew Cagney Date: Tue Feb 13 13:06:02 2024 -0500 libipsecconf: eliminate starter_end .certx commit 677a3425b520693fb023328f0b52af8e1cd311b4 Author: Andrew Cagney Date: Tue Feb 13 13:03:10 2024 -0500

[Swan-commit] Changes to ref refs/heads/main

2024-02-13 Thread Andrew Cagney via Swan-commit
New commits: commit 2cdf0c829df710d54d86fc9b519e771f18113228 Author: Andrew Cagney Date: Tue Feb 13 14:31:52 2024 -0500 routing: don't log "connection for ... is already in state" to whack commit 069c4f3fe5efa96950e4657cb78315f6ca8759d4 Author: Andrew Cagney Date: Tue Feb 13 14:40:57

Re: [Swan] Possible to setup multiple connections, partly behind NAT?

2024-02-13 Thread Phil Nightowl via Swan
> > conn headq > >left=%defaultroute > >leftcert=remotehost1 > >leftid=%fromcert > >right=198.51.100.33 > >rightid=%fromcert > >leftsubnet=0.0.0.0/0 > >rightsubnet=0.0.0.0/0 > > What are you trying to do here? Where does 0.0.0.0/0 live? It cannot > live at both sides

Re: [Swan] Possible to setup multiple connections, partly behind NAT?

2024-02-13 Thread Paul Wouters via Swan
On Tue, 13 Feb 2024, Phil Nightowl wrote: conn headq left=%defaultroute leftcert=remotehost1 leftid=%fromcert right=198.51.100.33 rightid=%fromcert leftsubnet=0.0.0.0/0 rightsubnet=0.0.0.0/0 What are you trying to do here? Where does 0.0.0.0/0 live? It cannot live at both

Re: [Swan] Possible to setup multiple connections, partly behind NAT?

2024-02-13 Thread Phil Nightowl via Swan
Hello again! Thanks for all information regarding x509 and appropriate matching within DNs. Meanwile, after adjusting the configs in order to remove opportunistic encryption, I tried to take the next step and get the connection with remotehost1.privlan to work. As of now, I have failed. In

[Swan-commit] Changes to ref refs/heads/main

2024-02-13 Thread Andrew Cagney via Swan-commit
New commits: commit 6aee63a0a5d742c9cd51d4440d1da6f338216f38 Author: Andrew Cagney Date: Mon Feb 12 20:34:10 2024 -0500 logging: log "internal error" using llog_pexpect() and with RC_INTERNAL_ERROR Note: connalias-01-conflict is triggering this. commit

[Swan-commit] Changes to ref refs/heads/main

2024-02-13 Thread Andrew Cagney via Swan-commit
New commits: commit 5a6eb802ebdd63899408e5c92b75cc75eda741fa Author: Andrew Cagney Date: Tue Feb 13 08:46:04 2024 -0500 libipsecconf: drop struct starter_end .id commit 764bc40b9fbc8541012563771209ab607cef2a48 Author: Andrew Cagney Date: Tue Feb 13 08:45:08 2024 -0500 testing:

[Swan-commit] Changes to ref refs/heads/main

2024-02-13 Thread Andrew Cagney via Swan-commit
New commits: commit cb96af2fc1e31d0c2c7c2d18fd8a874fb9b24e3c Author: Andrew Cagney Date: Tue Feb 13 08:33:28 2024 -0500 libipsecconf: warn about legacy ',,' -> '\\,' transformation commit 65be4313a15d32ec5428e6eefe9bde764ee4c3d0 Author: Andrew Cagney Date: Tue Feb 13 07:38:39 2024