New commits:
commit ed1472820ac03cccb7492c630db62a2b8ca68d35
Author: Andrew Cagney <>
Date:   Fri Feb 16 21:43:45 2018 -0500

    ikev2: don't use md->original_role when distributing CHILD_SA KEMAT
    Instead add/use .st_sa_role (SA_INITIATOR, SA_RESPONDER).  Set the
    field as part of creating the CHILD SA's state.
    For moment leave .st_original_role and code copying parent's value to
    child.  While suspect - value should be redunant and child should use
    parent's value - removing this causes problems.
    This should fix ikev2-child-ipsec-responder.

Swan-commit mailing list

Reply via email to