New commits:
commit 9cf11fe9183ccfa5f211b8ff7b340daec047a8d1
Author: Paul Wouters <[email protected]>
Date: Mon Jul 10 18:13:13 2017 -0400
IKEv1: don't fail when ikev1_decode_cert() fails
Because unlike the name suggests, it also does some ID checks. The ID
checks might lead to a valid CERT payload but a wrong ID. The wrong ID is
because we haven't connection switched yet, as refine_host_connection()
is called after ikev1_decode_cert()
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
