New commits:
commit 8d17f5ea489f3350708a3084c5be33acc109df93
Author: Andrew Cagney <[email protected]>
Date: Fri Sep 10 11:16:07 2021 -0400
testing: expect IKE SA to be handling CREATE_CHILD_SA retransmits
commit 6341e0d0257f26a7883bc5d1abff50ac362c625b
Author: Andrew Cagney <[email protected]>
Date: Tue Sep 7 14:18:47 2021 -0400
ikev2: on responder, process CREATE_CHILD_SA for a child using IKE SA
... instead of creating the Child SA and then switching to that.
Should the operation fail, the larval child is deleted and STF_OK
is returned (from the IKE SA's POV there isn't a problem).
The big complication here was the IKE SA trying to simultaneously
schedule both short term (exchange timeout) and long term (replace)
timeouts using the same event-slot (.sa_event).
This brings the IKE_AUTH and CREATE_CHILD_SA code paths for Child SA
closer to into line (and eliminates one of the remaining reasons
for scaning all states).
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
