New commits:
commit 8d75f4b2de862f93055e8c063d03c016a6e4a67f
Author: Andrew Cagney <[email protected]>
Date: Tue Aug 10 20:08:09 2021 -0400
ikev2: after an IKE SA rekey, move the initiator request queue to the new SA
Fixes an acquire being lost while a childless sec_label IKE SA
is being rekeyed.
commit be3583b4ecd5beeef5e6770e3ea4581f76757338
Author: Andrew Cagney <[email protected]>
Date: Tue Aug 10 20:22:49 2021 -0400
testing: add ikev2-labeled-ipsec-06-rekey-ike-acquire
Trigger an acquire half way through an IKE rekey exchange:
- use <<--impair drop-outgoing:1>> to cause the IKE rekey to stall
(it will resume when there's a retransmit)
- trigger the acquire
Since there's a transaction in progress the acquire is put onto
the old IKE SA's message queue. When the new IKE SA establishes
it is moved over and then initiated.
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
