Re: [Swan-dev] ikev2-x509-02-eku

2019-02-08 Thread Andrew Cagney
On Fri, 8 Feb 2019 at 00:53, Paul Wouters wrote: > > I suspect andrew’s kvm magic compile invocations to not yet enable IPsec > profiles for nss Yea, it turned out getting it to auto-detect got messy - plutomain.c likes to print the decision. Just tweaking the KVM make line is likely easiest

Re: [Swan-dev] ikev2-x509-02-eku

2019-02-08 Thread Paul Wouters
Yes Sent from mobile device > On Feb 8, 2019, at 19:08, D. Hugh Redelmeier wrote: > > | From: Paul Wouters > > | echo "NSS_HAS_IPSEC_PROFILE" >> Makefile.inc.local > > I don't know how to parse that. Do you mean this? > > echo "NSS_HAS_IPSEC_PROFILE = true" >> Makefile.inc.local >

Re: [Swan-dev] ikev2-x509-02-eku

2019-02-08 Thread D. Hugh Redelmeier
| From: Paul Wouters | echo "NSS_HAS_IPSEC_PROFILE" >> Makefile.inc.local I don't know how to parse that. Do you mean this? echo "NSS_HAS_IPSEC_PROFILE = true" >> Makefile.inc.local ___ Swan-dev mailing list Swan-dev@lists.libreswan.org

Re: [Swan-dev] ikev2-x509-02-eku

2019-02-08 Thread Paul Wouters
On Fri, 8 Feb 2019, D. Hugh Redelmeier wrote: The test is still failing. The same way. So you can try : echo "NSS_HAS_IPSEC_PROFILE" >> Makefile.inc.local Paul ___ Swan-dev mailing list Swan-dev@lists.libreswan.org

Re: [Swan-dev] match_certs_id()

2019-02-08 Thread Tuomo Soini
On Thu, 7 Feb 2019 22:43:52 -0500 (EST) "D. Hugh Redelmeier" wrote: > | From: Paul Wouters > > | On Thu, 7 Feb 2019, D. Hugh Redelmeier wrote: > | > | > | > > testing/pluto/nss-cert-chain-01-ikev2/OUTPUT/east.pluto.log:1758:"nss-cert-chain" > | > | > #1: EXPECTATION FAILED: cert->next == NULL