New commits:
commit 4948da023aefe079824f96fc48fc526b326fd27c
Author: Andrew Cagney <[email protected]>
Date: Wed Nov 7 08:09:28 2018 -0500
IKEv2 TS: change match_address_range() to to compare <=/>= depending on
initiator / responder
For the responder this flips END_WIDER_THAN_TS to END_NARROWER_THAN_TS
when comparing addresses. No new failures which would suggest
this case isn't covered?
It is eventually going to need to compute the intersection so that
it can match the first TS pair better.
(the more useful thing is the addition of ip_subnet_floor() and
ip_subnet_ceiling() for doing the comparisons against an ip_range).
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
