[Swan] nss initialization failure in centos FIPS mode.

2018-07-30 Thread Veetil, Vyshnav
Hi, Can you please explain ,why this if condition failing.please find the below code I am getting NSS initialization failure in my Centos FIPS enabled system. programs/pluto/plutomain.c (libreswan-3.23-5.el7.centos.x86_64.rpm) - if

[Swan] Self-signed certificate (X509: temporary cert import operation failed)

2018-07-30 Thread Qiuyu Xiao
Hi everyone, I am trying to configure a host-to-host transport IPsec tunnel. Each host uses the other host's self-signed certificate to do authentication. But I encountered some "X509: temporary cert import operation failed" error. Here is my configuration file:

[Swan-commit] Changes to ref refs/heads/master

2018-07-30 Thread Andrew Cagney
New commits: commit ce0ebc5d2ec13935080830a271475fbc728d8cea Author: Andrew Cagney Date: Fri Jul 27 15:48:15 2018 -0400 kvm: pass --cpu host-passthrough to virt-install by default stops the error: error: internal error: process exited while connecting to monitor:

[Swan-commit] Changes to ref refs/heads/master

2018-07-30 Thread Andrew Cagney
New commits: commit fc4ee320aa8e611903a096a54139b5c07543529d Merge: ce0ebc5 0f0136d Author: Andrew Cagney Date: Mon Jul 30 12:05:26 2018 -0400 f28: strip ipsec look's ROUTING TABLES section of stray white space Merge commit '0f0136dcdd1d0c30b9fc84db5a3c298c42dbce08' commit

[Swan-commit] Changes to ref refs/heads/master

2018-07-30 Thread Andrew Cagney
New commits: commit 94c074788508f1caccd34c4bab1b75ebb44ebcf8 Author: Andrew Cagney Date: Mon Jul 30 10:49:10 2018 -0400 testing/f28: strip 'ip route list' of any redundant white space Hopefully the only interesting thing is the use of a range to ensure that this sed only

[Swan-commit] Changes to ref refs/heads/master

2018-07-30 Thread Andrew Cagney
New commits: commit 88a9789476072bd945171adc99b82fc0436edbfc Author: Andrew Cagney Date: Tue Mar 14 20:18:09 2017 -0400 web: in never-passed.sh print #nr of last test to pass ___ Swan-commit mailing list Swan-commit@lists.libreswan.org

[Swan-commit] Changes to ref refs/heads/master

2018-07-30 Thread Andrew Cagney
New commits: commit b264662d35cf9561e5a6e5b9ccc0fa98f90f8ecf Author: Andrew Cagney Date: Mon Jul 30 16:41:42 2018 -0400 testing/f28: use systemctl start unbound.service Replacing 'service unbound start' which has different output in f22 vs f28. Beside, the output says use

Re: [Swan-dev] Clearing the deck for the f28 switch ...

2018-07-30 Thread Paul Wouters
On Sat, 28 Jul 2018, Andrew Cagney wrote: Please don’t. Some tests were put in wip when they shouldn’t have been are were neglected as a result. I don't follow. Surely any test that consistently fails is going to get ignored. But less so when they dont appear anywhere whatsoever or are

Re: [Swan-dev] Clearing the deck for the f28 switch ...

2018-07-30 Thread Andrew Cagney
On Mon, 30 Jul 2018 at 16:38, Paul Wouters wrote: > > On Sat, 28 Jul 2018, Andrew Cagney wrote: > > >> Please don’t. > >> > >> Some tests were put in wip when they shouldn’t have been are were > >> neglected as a result. > > > > I don't follow. > > > > Surely any test that consistently fails is

[Swan-commit] Changes to ref refs/heads/master

2018-07-30 Thread Andrew Cagney
New commits: commit 21cc866dfcb1b9b0ace593a59afa50c7cfcd76ea Author: Andrew Cagney Date: Mon Jul 30 16:43:49 2018 -0400 testing/f28: apply 'ip route' sanitizer to all 'ip (-4|-6)? route' commands ___ Swan-commit mailing list

Re: [Swan-dev] Vendor ID ambiguity

2018-07-30 Thread Paul Wouters
On Mon, 30 Jul 2018, D. Hugh Redelmeier wrote: Some of our code emits our vendorid payload using libreswan_vendorid as our Vendor ID using out_vid( ..., VID_LIBRESWANSELF); and some uses pluto_vendorid, via ikev1_out_generic_raw(). Those are two different things, Which one is