New commits:
commit 52addc4fcd146d0f944e91e315917cf0cb8cf5e0
Author: Andrew Cagney <[email protected]>
Date:   Fri Feb 23 16:49:11 2018 -0500

    ikev2: only reply when invalid clear payloads are in an SA_INIT request
    
    - the IKE SA initiator can't trust a bad reply
    
    - packets from AUTH and remaining exchanges lacking integrity must be
      dropped (valid clear structure, and decrypt)

_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit

Reply via email to