New commits:
commit 4eeb1a5a4d97c6d2ea379696ea891dd02cc73cca
Author: Vukasin Karadzic <vukasin.karad...@gmail.com>
Date: Thu Jan 30 10:06:05 2020 +0100
IKEv2: fix PPK code that wasn't following RFC draft
the situation was the following:
On responder side the peer (responder) didn't find a suitable PPK
but he was configured to use PPK (ppk=insist). This happens in IKE_AUTH
exchange.
Instead of sending AUTHENTICATION_FAILED back, the responder silently
failed.
See bottom of page 9 of draft-ietf-ipsecme-qr-ikev2-11.
Update the console output in one affected test.
Signed-off-by: Paul Wouters <pwout...@redhat.com>
commit b5954c3cf84ef5c13c24b81999d664ea5fe55e8e
Author: Vukasin Karadzic <vukasin.karad...@gmail.com>
Date: Thu Jan 30 10:04:14 2020 +0100
testing: tweak and simplify some of PPK tests
Signed-off-by: Paul Wouters <pwout...@redhat.com>
commit dadf8b35ab518cb353588f10885f0666606799c0
Author: Paul Wouters <pwout...@redhat.com>
Date: Thu Jan 30 10:09:21 2020 +0100
pluto: conn_by_name() had dropped a parameter
follow up of e72094ea5
_______________________________________________
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit
