New commits:
commit fb8a11e4a81997d4afe3be276398e4d1a4d378ac
Merge: b85f7ff940 33ec565109
Author: Andrew Cagney
Date: Mon Jan 27 15:59:47 2025 -0500
testing: expand addresspool tests
see #2019 an exhausted address pool should reject connection
see #1985 test lease recovery
New commits:
commit aa3c6828b369ec5e2102120f8807ce02ca101b00
Author: Andrew Cagney
Date: Mon Jan 27 23:50:55 2025 -0500
web: add type: bug to bugs
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send an email to swa
New commits:
commit 362452f624e207924c385f932864da23237c15ef
Author: Andrew Cagney
Date: Tue Jan 28 14:37:18 2025 -0500
testing: add addresspool-4in4-{reserved,in-use}-{ikev1,ikev2}-ikev1
Note: only IKEv1 can generate non-CP/MODECFG address requests
(IKEv2 ignores address sugge
New commits:
commit 15263ec98156ecded9806a2036a6288fd76fea84
Author: Andrew Cagney
Date: Tue Jan 28 15:45:49 2025 -0500
testing: in wait-for-pluto.sh, ignore debug logs
filter out debug logs using the magical:
grep -v -e '|'
update calls removing '^[^|] ' prefix to patt
New commits:
commit 6f16e9a67dc0f5bed458f0ad586b7703dfeeaeea
Author: Andrew Cagney
Date: Tue Jan 28 18:04:26 2025 -0500
web: add some checkboxes to the bug template
(note that the check boxes don't affect labels, it seems
that is done post bug submission using a workflow)
New commits:
commit 42a68e3a5f1e46628b5bbe3548e35bcae2a722c9
Author: Andrew Cagney
Date: Tue Jan 28 22:04:53 2025 -0500
web: fix some typos in the bug template
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send an
New commits:
commit 8d6197cec67dc0c2821e1df39b9763a9897dfc7e
Author: Andrew Cagney
Date: Tue Jan 28 09:37:56 2025 -0500
web: add "task" to issue types
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send an email to
New commits:
commit a99b0af4070263abbeb43bfaeaba44e0d587e6b9
Merge: 8d6197cec6 27455dc9b0
Author: Andrew Cagney
Date: Tue Jan 28 11:23:12 2025 -0500
testing: more addresspool tests
see #1985 test lease recovery
Merge commit '27455dc9b0e5144c337958f8ceebc5f374837275'
commi
New commits:
commit 7c4a817277c613f537c8cb469763c6d2810793ab
Author: Andrew Cagney
Date: Tue Jan 28 12:28:23 2025 -0500
addresspool: pexpect() an addresspool when called
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscri
New commits:
commit df4d000af99e53a09765011c7ae3ca75d870d2a3
Merge: 7c4a817277 27d541e7ba
Author: Andrew Cagney
Date: Tue Jan 28 13:00:46 2025 -0500
addresspool: confirm pool exhausted message
Merge commit '27d541e7bac78b227f4f51752094ff942c1e351a'
commit 27d541e7bac78b227f4f51752
New commits:
commit 842382f869a65b9a2023cbab4e33b53bd728fb96
Merge: 362452f624 bdd8bd75bd
Author: Andrew Cagney
Date: Tue Jan 28 15:08:10 2025 -0500
testing x509: switch to NSS's badca
Merge commit 'bdd8bd75bda9d9fc1b483f1c8a1bfd59c748bb3b'
commit bdd8bd75bda9d9fc1b483f1c8a1bfd59c
New commits:
commit eb66c8e5d382b2c5015df9c55c76365395422788
Merge: 834eb97699 cc318066e1
Author: Andrew Cagney
Date: Tue Jan 21 08:50:42 2025 -0500
ipsec down: use "delete", not terminate in more IKEv1 code
Merge commit 'cc318066e1f58a44d511e3cad53dfa47d49be25b'
commit cc318066e1
New commits:
commit 6277cf47c78c74748714d090986d7866faf52698
Author: Andrew Cagney
Date: Wed Jan 29 20:16:53 2025 -0500
testing BSD: try to stop DAD
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send an email to s
New commits:
commit fee96aa95000c03c9b69633c9ebeedb7c92e80bf
Author: Andrew Cagney
Date: Wed Jan 29 14:48:07 2025 -0500
testing: use GAWK to run refcnt.gawk
- renamed from refcnt.awk
- update KVMs so that GAWK is installed
fix #2022 Debian's awk doesn't like refcnt.awk
New commits:
commit 88b6d01a579fa69c0ef6c1d3c1a12e72bec38c71
Author: Andrew Cagney
Date: Wed Jan 29 15:00:13 2025 -0500
testing: update OpenBSD's output
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send an email
New commits:
commit 9c48b5ad7faa2c57396d24a15579afc4a1c49634
Author: Andrew Cagney
Date: Mon Jan 13 15:18:02 2025 -0500
testing x509: drop OLD and OLD_END dates, no longer used
code needing old certs generates it locally
___
Swan-commit
New commits:
commit 753c1165e09a87608baaa4052775ad1fcf213530
Author: Andrew Cagney
Date: Tue Jan 14 09:04:46 2025 -0500
testing: add strongswan to fedora domain
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send a
New commits:
commit ee28c7e4b1163632964eb396e953d9b9ce6b1aa7
Merge: 4830d46fe7 8e7b412ae8
Author: Andrew Cagney
Date: Mon Dec 23 07:08:03 2024 -0500
connections: move extract CFI and host_addr to front
ref #1974 move id_has_wildcard() to connection.c kind() code
Merge comm
New commits:
commit 8f8f4b4be6b09f3881f035b6bb975e635afdcd00
Author: Andrew Cagney
Date: Mon Dec 23 09:03:25 2024 -0500
connections: always set peer's nexthop in update_hosts_from_end_host_addr()
instead of updating it
in extract_host_end() save whack_end .nexthop in host'
New commits:
commit a7b34d6d3c99e8317902db7b46cee6a93aaccc77
Merge: 8f8f4b4be6 bd365bbe32
Author: Andrew Cagney
Date: Mon Dec 23 20:21:31 2024 -0500
connections: merge two functions setting proposals
and reduce number of places where .has_client is set
Merge commit 'bd365b
New commits:
commit 1e91ccfa378146ab6884e1734a92134c0e70fa47
Author: Andrew Cagney
Date: Mon Dec 23 20:23:07 2024 -0500
connections: add more detail to extract ID code
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe
New commits:
commit 761b35c95ea7e46f67549b72b592a08523e869a8
Merge: 6c739cc0e0 cd3a1045d8
Author: Andrew Cagney
Date: Wed Jan 15 20:53:03 2025 -0500
ipsec down: work splitting code into IKEv1 / IKEv2 code paths
- add down_{ikev1,ikev2}_connection_state()
- use visit_connection_
New commits:
commit ecd03b40c23d2d5c3b7dc5d795a6ba0a951d0da5
Author: Ilya Maximets
Date: Wed Jan 15 14:17:53 2025 -0500
ipsecconf: move protoport parsing to set_whack_end
ttoprotoport() is using a very heavy getservbyname() underneath to
convert protocol names to port numbers.
New commits:
commit 7d36ecbbe8bf0231f8a729edb83c62f2a02a0d03
Author: Andrew Cagney
Date: Thu Jan 16 08:21:42 2025 -0500
testing: more ec-cert tweaks
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send an email to s
New commits:
commit 16a05d2828d67a1b52d531dda39e86c8aebbea65
Author: Andrew Cagney
Date: Thu Jan 16 08:39:51 2025 -0500
testing: in nss-cert-crl-03 don't expect lurking sha1 cert
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To
New commits:
commit c12f623ad0d2b4daefbbbe225a47971335e3b55a
Author: Andrew Cagney
Date: Thu Jan 16 08:55:50 2025 -0500
testing x509: leave out default ec certs when strongswan
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To un
New commits:
commit a1e8cb420565b1b1239ee6bb02571c743f388b85
Author: Paul Wouters
Date: Thu Jan 16 13:18:06 2025 -0500
testing: add ipv6-6in4-02-ikev2-ipsec-device
This tests for https://github.com/libreswan/libreswan/issues/2005
But seems to not trigger any errors ?
_
New commits:
commit 8475739585ae9015eac202c2d9abbee36718c90a
Author: Andrew Cagney
Date: Thu Jan 16 10:12:09 2025 -0500
CHANGES: whack/addconn: orders of magnitude speedup of 'ipsec add' w/
protoports= [Ilya Maximets #1987]
___
Swan-commit maili
New commits:
commit 6b4ac3ab002966b9bdd2615a38c551dd055056a3
Author: Andrew Cagney
Date: Thu Jan 16 10:29:02 2025 -0500
CHANGES: misc tweaks
missing/wrong bug nrs and credits
___
Swan-commit mailing list -- swan-commit@lists.libreswan.or
New commits:
commit 157b333b7046cb2dd939402393181a689689d284
Merge: a7776e4287 bb81ff1633
Author: Andrew Cagney
Date: Fri Jan 10 09:32:34 2025 -0500
connections: move .host.id out of add_end_cert_and_preload_private_key()
Better separate the code extracting the id from the whack
New commits:
commit a7776e428710473d1091574cfe08c7939ea3e1d6
Author: Paul Wouters
Date: Fri Jan 10 09:20:57 2025 -0500
pluto: initialize log_limiters entry for MSG_ERRQUEUE_LOG_LIMITER
___
Swan-commit mailing list -- swan-commit@lists.libreswan.o
New commits:
commit 52046aa218adfda78a2fbec8f6b17c3d217bc75c
Author: Andrew Cagney
Date: Thu Jan 16 16:50:23 2025 -0500
testing x509: generate selfsigned certs using selfsigned.sh
and not shell commands wrapped in python clothing
___
Swa
New commits:
commit a68b7d4ebd490dabafe5a53d4285b23cf46a7aa0
Merge: 52046aa218 a33f5972ac
Author: Andrew Cagney
Date: Fri Jan 17 08:32:33 2025 -0500
revival: tone down connection's IKE SA .*_sa cross-checks
... and add another crossing stream test
close #1989 EXPECTATION F
New commits:
commit 253b952bb85904ba71afe6cb15a3bb6148c0638c
Author: Andrew Cagney
Date: Fri Jan 17 08:56:23 2025 -0500
testing: mark ipv6-6in4-02-ikev2-ipsec-device WIP
different output on KVM, see #2005
___
Swan-commit mailing list --
New commits:
commit 9ea44f32033dda7a0f90c64ae4a8af49d54960e0
Merge: f5f4b66d5a 8aadcc41da
Author: Andrew Cagney
Date: Thu Jan 9 15:00:35 2025 -0500
connections: use "visitor" not "whack" when describing connection visitor
code
Merge commit '8aadcc41daa03a0a74e82291c455541f19ec6b24
New commits:
commit 8715e2fef28d676908249793eecac07c434c469b
Merge: 753c1165e0 b4afb3de1f
Author: Andrew Cagney
Date: Wed Jan 15 09:41:24 2025 -0500
ipsec down: only down the connection once
Merge commit 'b4afb3de1f19035225b015a7ff99d7647290068b'
commit b4afb3de1f19035225b015a7ff9
New commits:
commit f9af980132f585a7735e8cbe62d9691565a0f5b1
Author: Ilya Maximets
Date: Thu Jan 2 12:50:38 2025 +0100
ttoport: check numbers before the service name lookup
getservbyname() is a very slow function. It seems to linearly scan all
the values in /etc/services (1147
New commits:
commit 33f1d56b14f9aa49547ebc6c8245af504606f0db
Merge: 8715e2fef2 6fab9f219e
Author: Andrew Cagney
Date: Wed Jan 15 13:43:07 2025 -0500
testing x509: add RSA, but not EC certs by default
(when pluto userland)
Nice to have is identical looking RSA and EC certs.
New commits:
commit 6c739cc0e0453c34af8e5ca77f525fa0c0cdc9ac
Author: Andrew Cagney
Date: Wed Jan 15 16:11:29 2025 -0500
testing: mark nss-cert-crl-03-strict WIP, see #1953
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubsc
New commits:
commit 1781270816b87823f31873d46bdf583b06173a2a
Author: Andrew Cagney
Date: Thu Jan 16 14:47:32 2025 -0500
testing x509: don't generate EC certs in dist_certs.py
Seems code needing EC certs uses those generated using
strongswan-ec-gen.sh?
_
New commits:
commit e444a6837a19791e55ecf15493667adb2260de8a
Merge: 1781270816 9b6aa610ae
Author: Andrew Cagney
Date: Thu Jan 16 17:23:17 2025 -0500
ikev2: test for crossing-stream combined with a connswitch
see #1989 EXPECTATION FAILED: revival: skipping, .negotiating_ike_sa is no
New commits:
commit 140bb87b52061a1c817982a7c2cd8de46d913b01
Merge: 27473bae7b 38540d9683
Author: Andrew Cagney
Date: Wed Feb 12 22:21:56 2025 -0500
testing x509: switch strongswan to NSS ecdsa certs
Merge commit '38540d9683b53baba03f4b2885ac26c630e21d4a'
commit 38540d9683b53baba0
New commits:
commit 08f248a3fe92c62a1d7758e37309debe63ccef3d
Merge: 140bb87b52 ab895b2dd6
Author: Andrew Cagney
Date: Thu Feb 13 20:31:21 2025 -0500
testing x509: generate NSS's version of a revoked cert
Merge commit 'ab895b2dd6c0527513095fef64de442cebadbba2'
commit ab895b2dd6c052
New commits:
commit b31d0a251ceed99fffee1ff7ada092617f121af8
Merge: 3777d7cdb5 66231baebb
Author: Andrew Cagney
Date: Sat Feb 8 23:09:46 2025 -0500
testing x509: use NSS's root ca directly
not via an import/export
Merge commit '66231baebb96a58d1952ad6ad17944ff69c8e853'
co
New commits:
commit 28f651967bf3f5bfd21e576572dc5f1607c0e2b7
Author: Andrew Cagney
Date: Sat Mar 15 11:21:25 2025 -0400
testing kvm: rework KVM_*_OSINFO
- hardwire debian's osinfo to linx2022
see #2092 can't boot 32-bit debian with --osinfo debianNN
see https://gitlab.c
New commits:
commit a4cf87be7f128a643ec56d4a887f0b1281581764
Author: Andrew Cagney
Date: Fri Mar 14 11:48:36 2025 -0400
testing: in ip-addr-show add --colour=never
stop the control characters
___
Swan-commit mailing list -- swan-commit@l
New commits:
commit 3a45be2cb8f0d38fb90825768dba822d0f4fcf80
Merge: 9a729f420a e1bb29ea6d
Author: Andrew Cagney
Date: Wed Mar 19 09:49:54 2025 -0400
CRLs: fix #2098 eliminate CRL helper thread
Merge commit 'e1bb29ea6d29ddbd6d54795d1390122a8d931281'
commit e1bb29ea6d29ddbd6d54795d1
New commits:
commit d08cd4b374528f038583416f1617cdd4f7c4e7ef
Author: Andrew Cagney
Date: Wed Mar 19 13:37:15 2025 -0400
CRLs: when no USE_LDAP, pass ldap:... url to cURL
where it might just work
close #2097 cleanup ldap crl fetch support; was drop it?
New commits:
commit eec8be9116c593c4ba53af1259978b234b31bd2e
Author: Andrew Cagney
Date: Wed Mar 19 19:34:02 2025 -0400
testing: make x509-profile-01-key-usage self reproducing
generate the certs and conns on the fly
___
Swan-commit mail
New commits:
commit 0badca4a91339a11d61815f85f54d4518ef6222a
Author: Andrew Cagney
Date: Wed Mar 19 16:03:44 2025 -0400
testing x509: make x509-profile-02-extended-key-usage self reproducing
- generate broken EKU cert from conn name using `ipsec certutil`
- generate conn using
New commits:
commit 83827eb5ab113b542d27ed4c59d86edb426c029d
Merge: 34d6ceb717 4728c25d7b
Author: Andrew Cagney
Date: Sun Mar 23 14:27:54 2025 -0400
whack: switch commands .whack_command =
mostly; exceptions tracked with separate taks
close #2109 merge standalone whack commands
New commits:
commit 0aaf455d8770440a7f8ee578ba6373416f80abc9
Merge: 1178ade84e fe8db4d026
Author: Andrew Cagney
Date: Thu Mar 20 17:08:50 2025 -0400
testing x509: flatten generated cert tree a little
Merge commit 'fe8db4d02657925345ae3e12674cb191197b4068'
commit fe8db4d02657925345
New commits:
commit 65fab5a7a93deec90fcca068432b71025329e15d
Merge: 0aaf455d87 7861a6268d
Author: Andrew Cagney
Date: Fri Mar 21 10:52:50 2025 -0400
testing x509: display the cert chain when importing
Merge commit '7861a6268deb919565c7527eb05a7cc41faf3d6c'
commit 7861a6268deb91956
New commits:
commit a18eca1013b90c86cf5048e5116242ddef5096cf
Author: Andrew Cagney
Date: Fri Mar 21 14:26:17 2025 -0400
testing: update ikev2-ddos-01 (renamed to ddos-01-ikev2)
- skip .209 as ROAD's existing IP address
- add .253 .254
- drop nhelpers=20 on ROAD
just c
New commits:
commit 34d6ceb71744f4379c5bbb78a1609bb56eeb45f4
Author: Andrew Cagney
Date: Fri Mar 21 15:15:41 2025 -0400
testing namespaces: run `ipsec checknss` when the namespace hack
close #2110 add ipsec checknss to check namespace startup
__
New commits:
commit 3aea0018958eb7ec884cc0db28a2b5956afed531
Author: Tuomo Soini
Date: Fri Mar 21 18:56:35 2025 +0200
ipsec.service: clanup extra comments from service file
All that information is in documentation
commit a039afeab22e392165b091184ad4be50b7136cbb
Author: Tuomo Soini
New commits:
commit 148d92955dd6df2f000a1dae1d6c3964a3274fc6
Merge: 32270acb06 a9ac533956
Author: Andrew Cagney
Date: Fri Mar 21 11:47:59 2025 -0400
CRLs: reword message when CRLs are missing or out-of-date
New message:
certificate payload rejected; crl-strict=yes and Certifi
New commits:
commit c5be4d7239a8570cd9d3419a6e5c03ed53be020f
Merge: 9e6e772217 2ae2cbc71d
Author: Andrew Cagney
Date: Mon Mar 24 09:00:23 2025 -0400
code: update enum *_kind code
rename enum sa_type -> sa_kind like connection_kind, shunt_kind, ...
Merge commit '2ae2cbc71d7
New commits:
commit 9e6e772217c49aafab0dd0affc629c3fe60efd4d
Author: Andrew Cagney
Date: Mon Mar 24 08:52:44 2025 -0400
testing x509: dump chain when importing .p12 files
like .all.p12 et.al., update tests
___
Swan-commit mailing list --
New commits:
commit 6dbe80696253b7040e195af4527e3d949b888ec5
Merge: a73f491a71 6f2dc0eedd
Author: Andrew Cagney
Date: Mon Mar 24 21:03:02 2025 -0400
testing web: misc fixes
Merge commit '6f2dc0eedd76d2d7b98cf9753d02aae8c2b49479'
commit 6f2dc0eedd76d2d7b98cf9753d02aae8c2b49479
Auth
New commits:
commit 2b155065b0069db5062776294d3f92c6df1ca94c
Merge: 3d887fec8e 992563b39e
Author: Andrew Cagney
Date: Sun Mar 16 21:38:33 2025 -0400
CRLs: move fetch code to the separate _import_crl program
close #2033 merge fetch.c into _import_crl
close #2095 openssl on
New commits:
commit 57145064f85d026c39208f5222a44b2bf0255767
Author: Andrew Cagney
Date: Fri Mar 14 11:40:39 2025 -0400
testing kvm: fix hostnamer's service
tks to Bleve
close #1913 f41: hostnamer: who-am-i on testing's w2fedorarise
___
New commits:
commit 9510f43eb45dea0bcbef2a9a682006199878bf7a
Author: Andrew Cagney
Date: Mon Mar 17 16:45:16 2025 -0400
testing: save the journal during post-mortem
Tempoary hack for #2099 et.al. abort
___
Swan-commit mailing list -- swa
New commits:
commit a44c5695561b0e1e87fc9b5eb933b37fe1e29a0e
Author: Andrew Cagney
Date: Mon Mar 17 17:18:32 2025 -0400
testing: tone down "testing: update xfrmi output eth0 to NONE"
doesn't apply when xfrm was created manually
___
Swan-
New commits:
commit 8b772628cdaf51986096bbf81e6d2fe3f2255bb3
Merge: a44c569556 40a69a231c
Author: Andrew Cagney
Date: Mon Mar 17 17:21:19 2025 -0400
ocsp: misc cleanups
- add use ocsp_method and ocsp_method_names
- separate out CRL code
- consolate code into x509_ocsp.[hc]
New commits:
commit 315407645df835287a89a790c41cc2606cd057df
Merge: 8b772628cd b52c8e1bf9
Author: Andrew Cagney
Date: Mon Mar 17 21:55:03 2025 -0400
CRLs: code updates
- merge code into x509_crl.[hc]
- eliminate callback to fetch_crl(), simplify
- combine config options int
New commits:
commit 9a729f420acf9c4a6c9216cc0128e2f279e71e86
Merge: 315407645d 3480a25efd
Author: Andrew Cagney
Date: Tue Mar 18 21:10:00 2025 -0400
CRLs: invert fetch queue, only fetch each URL once
that is: a list of URLs, each containing a list of DNs
fix no point fetch
New commits:
commit 47aec2fed5f5acc85fbe4bc97337ecaf4757c8c1
Author: Andrew Cagney
Date: Thu Mar 20 08:39:37 2025 -0400
testing: drop --dmesg from journalctl in post-mortem.sh
Need everything.
___
Swan-commit mailing list -- swan-commit@
New commits:
commit a47e2bec05a550d6454b8cdba1aaf9bfe28517ee
Merge: 26e6dc1f2c 0f5d9a0faa
Author: Andrew Cagney
Date: Fri Apr 4 20:15:57 2025 -0400
kernel: allow "pass" as an alias for "passthrough"
ref #2151 allow/prefer pass to passthrough for shunts
Merge branch 'main'
New commits:
commit b4e16ab3d502ed23d66c8d90741068a418be0b59
Merge: ce4debc12d bf0a45fced
Author: Andrew Cagney
Date: Sun Apr 6 10:10:33 2025 -0400
ipsec readwriteconf: drop --rootdir options
close #2152 drop --rootdir and --rootdir2 options to ipsec readwriteconf
Merge br
New commits:
commit 4f410450964e14878229ab19a782e13da3ae0fa4
Author: Andrew Cagney
Date: Sun Apr 6 10:11:45 2025 -0400
testing: in post-mortem.sh, use ipsec _kernel {state,policy}
follow-up:
testing: replace ip xfrm {state,policy} with ipsec _kernel {state,policy}
__
New commits:
commit 564d233431edf2fb60edc3fad95fbad4cf014bba
Author: Andrew Cagney
Date: Sun Apr 6 10:24:50 2025 -0400
documentation: {negotiation,failure}shunt=pass
rather than pass through
close #2151 allow/prefer pass to passthrough for shunts
Also note that th
New commits:
commit 6378af97a863a43ff18d89aa723b8c6d9b199f7d
Merge: 7e9b278686 10f72b15f2
Author: Andrew Cagney
Date: Tue Mar 25 13:10:34 2025 -0400
libipsecconf: cleanup the {left,right}=%... name table
ref #2107 ipsec whack --host %defaultroute
Merge commit '10f72b15f213
New commits:
commit a73f491a71101b994fc741051b23e8c77d020034
Merge: c5be4d7239 a3368e05f8
Author: Andrew Cagney
Date: Mon Mar 24 14:05:35 2025 -0400
whack: .whack_command follow-up
- use `ipsec checkpubkeys` (and fix)
- reject duplicate command options
Merge commit 'a3
New commits:
commit 84d3d5c86129c4b36d2b831ce9d954113bab7104
Author: Andrew Cagney
Date: Sun Mar 23 17:04:23 2025 -0400
whack: fix build when there's no seccomp
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send a
New commits:
commit 6d8f9922d784109b414d8762a279d3326aa0a9de
Author: Andrew Cagney
Date: Fri Apr 4 15:19:11 2025 -0400
testing kvm: fix file leaks in ./kvm purge and ./kvm uninstall
was leaving behind
- boot.ok
- linux-transmogrify.{vmlinux,initrd}
Note: the quick boot
New commits:
commit ce4debc12d63ec338ea5f739b9947809f2a9756b
Merge: 6d8f9922d7 a69b35e024
Author: Andrew Cagney
Date: Sat Apr 5 16:49:57 2025 -0400
libipsecconf: prototype ipsec addconn --name foo left=1.2.3.4 right=5.6.7.7
The code includes hacks to emulate `whack ... --to ...`
New commits:
commit a09c7f410b4dfbc66a3d2d6f267665e541a6796f
Merge: a47e2bec05 d38376e24e
Author: Andrew Cagney
Date: Fri Apr 4 22:03:32 2025 -0400
server: add ability to capture output from server_fork()
for instance PAM needing to pass parameters back to pluto via stdout
per
New commits:
commit 5a09e156e1893b6d2c737964772d3af7ba1ee18d
Author: Andrew Cagney
Date: Mon Mar 31 13:07:37 2025 -0400
testing kvm: split systemd/transmogrify.sh
into
transmogrify-hostnamer.sh
transmogrify-networkd.sh
helps with #2088 pass systemd.hostname=east to
New commits:
commit a895c90b2e075b7c2a444ae03261cffe5bb21887
Merge: d9bfc65fbd c7f0baac82
Author: Andrew Cagney
Date: Sun Apr 6 23:28:42 2025 -0400
testing: set east,west,north,road,nic hostname using kernel boot line
As explained by Antony. Add systemd.hostname=NAME to the kernel
New commits:
commit 1178ade84ee1c22ca451b6abc012ac761f380512
Author: Andrew Cagney
Date: Thu Mar 20 09:52:25 2025 -0400
testing x509: split basic-constraints test
- playing with generated end certs
- playing with pre-generated CA (root, intermediate) certs
New commits:
commit 7e9b278686c4f59bd24f4aba0458d0a1fa6e8f4e
Merge: 6dbe806962 94e1d68bbb
Author: Andrew Cagney
Date: Tue Mar 25 08:34:13 2025 -0400
testing x509: contract name of .p12 and .key files
Merge commit '94e1d68bbb54071c4df1850975b6790e39d99ad9'
commit 94e1d68bbb54071c4d
New commits:
commit 96d0f77cf2c407d6dae7e619aa048980085f5a17
Merge: 79e3b1593c 4565c0b010
Author: Andrew Cagney
Date: Wed Mar 26 11:01:26 2025 -0400
ocsp: log more details during startup
Merge commit '4565c0b0104f40ed56e1fac6463a296f9535c108'
commit 4565c0b0104f40ed56e1fac6463a296
New commits:
commit 648a9ff1cb51ec7219e4c1c35315e23d7c8215c4
Merge: 96d0f77cf2 855a7cd114
Author: Andrew Cagney
Date: Wed Mar 26 11:05:29 2025 -0400
libipsecconf: cleanups
- make vti= more like interface-ip=
Merge commit '855a7cd114fd53ae19b4ce7f38dbda852ccaccfe'
commit 8
New commits:
commit d85c157dd67c2dbb0baeca581353dede30c12cde
Author: Tuomo Soini
Date: Wed Mar 26 19:39:26 2025 +0200
packaging/fedora: fix to build correctly without systemd-devel
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
T
New commits:
commit 3a91b17cdc1e1510a7d5c4a222dcf75fe38de66c
Author: Andrew Cagney
Date: Thu Mar 27 17:31:09 2025 -0400
testing: skip newoe-30-shunt-slash32 for now
the crashes make it really really slow
___
Swan-commit mailing list -- s
New commits:
commit 79e3b1593c2203ca9f2d25059514f348dfe28bb1
Author: Andrew Cagney
Date: Tue Mar 25 17:20:46 2025 -0400
CHANGES: add PKIX and Testing
___
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send an email to
New commits:
commit feba700d8deb05504a8bc04f1fd943605c9a753c
Merge: d85c157dd6 7b078fb6ee
Author: Andrew Cagney
Date: Wed Mar 26 23:01:19 2025 -0400
oe: log when IKE_SA_INIT is sent
ya can't debug what ya can't see
close #1225 the suppressed OE logs seems arbitrary
ref
New commits:
commit 1c6af0750aa16a893d798546ba25bd826f7891a9
Merge: c4db640bd7 f640a0df36
Author: Andrew Cagney
Date: Wed Mar 26 23:08:41 2025 -0400
testing: don't hide established Quick Mode details
esp which SA it is using!
close #1419 don't sanitze all of {using isakmp#
New commits:
commit 9bd9dba554c62243a4d0012e7cebb20072f6ccd9
Author: Antony Antony
Date: Thu Mar 27 16:08:18 2025 +
testing/utils/swantest remove unused script
commit cdac1072d2ea06ee6e1bfff0953b49f28ad4c687
Author: Antony Antony
Date: Thu Mar 27 16:08:12 2025 +
testing: re
New commits:
commit 4dd7e54b067df86920de3f9f53df376f007ee12b
Author: Tuomo Soini
Date: Thu Mar 27 19:21:11 2025 +0200
Completely remove _stackmanager
fix #2080
We haven't used it since 5.0, It's obviously not needed any more.
__
New commits:
commit eb73efe568ab5345bdd064c12299c7396ca9d0ee
Merge: 3a91b17cdc a270640e71
Author: Andrew Cagney
Date: Thu Mar 27 18:11:16 2025 -0400
routing oe: don't try to insert failureshunt=none
see #2108 Assertion failure with libreswan 5.1 with null authentication
Me
New commits:
commit 095ded48076bf49f9d93f910263b01ceb4a3357c
Merge: 4dd7e54b06 c8483eff2c
Author: Andrew Cagney
Date: Thu Mar 27 16:07:58 2025 -0400
oe: add whack --negodrop and exhaustively test all shunt options
Merge commit 'c8483eff2ccbdd09f8ddd997546c8038535a6f36'
commit c848
New commits:
commit 3dbceca8ed7364ecd9e2c7bb1cecb4f53ee57279
Author: Antony Antony
Date: Wed Apr 9 13:52:47 2025 +
testing: remove remenants of initial travis attempt
while leaving second attempt still around for antother carefull
cleaning. files ./testing/docker and mk/do
New commits:
commit 410eb16e064cba3fd49483138736fbc005fa8f7e
Merge: 25d56d5d4c 683689b83d
Author: Andrew Cagney
Date: Wed Apr 9 17:28:03 2025 -0400
logging: cleanups, use LDBG_*(logger, ...) more
Merge branch 'main' into HEAD
commit 683689b83d46d358a1a306104517bebe9e3c3568
Author:
New commits:
commit 1378c077d8e6240237247a43040ef6b4370adf6c
Author: Andrew Cagney
Date: Wed Apr 9 18:55:32 2025 -0400
testing kvm: workaround libvirt/761 stupidity
libvirt flip-flops initrd's ownership between ROOT and current-user
which means that QEMU, running as current-use
New commits:
commit ecfa0e957a8a66d17827527af7d2815409cee2cc
Merge: 0d4ab1b4fc d8b722a074
Author: Andrew Cagney
Date: Thu Apr 10 13:15:03 2025 -0400
pam: add plumbing needed to capture output from pam_exec.so
see #2105 ikev1 xauth PAM read addresspool
Merge branch 'main' i
New commits:
commit 1f207c090e40a9f49081351f9a317ebbf03cb75d
Merge: ecfa0e957a 2915d1f4a5
Author: Andrew Cagney
Date: Thu Apr 10 13:47:28 2025 -0400
x509: wrap SSL profiles in USE_NSS_SSL_SECURITY_PROFILE
close #2075 build time option to enable server/client profiles
Merge
New commits:
commit 4063320b3d50460123552ae6960fcd26eda0900f
Author: Andrew Cagney
Date: Thu Apr 10 14:35:38 2025 -0400
x509: wrap SSL profile in #ifdef USE_NSS_SSL_SECURITY_PROFILE
not #if, fix:
x509: wrap SSL profiles in #if USE_NSS_SSL_SECURITY_PROFILE
_
New commits:
commit 08142e4b6b5c47bb5aa8e9f4bdc8bce8aeb2852b
Author: Andrew Cagney
Date: Fri Mar 28 15:01:29 2025 -0400
Revert "u0", ccidental test commit
This reverts commit d7700c8f14d9cf8a52ca6bc163d51b0f378cb3d9.
commit dcd0048d39280e06eb171cf8bffb15e1635a1248
Author: Andrew C
701 - 800 of 1790 matches
Mail list logo
