New commits:
commit 68a15c7da608aa779e39c44121769a4093439c5f
Author: Andrew Cagney <cag...@gnu.org>
Date: Tue Oct 10 14:25:17 2023 -0400
routing: set .newest_routing_sa to ROUTED_NEGOTIATION Child SA
When a Child SA initiates, updating the routing from
ROUTED_ONDEMAND->ROUTED_NEGOTIATION, make that child the
connection's routing owner and, hence, responsible for
any unrouting (for instance when the exchange fails)
ref #1135
ref #1316
commit 4e1d39365a3aa117be6194412101df0fe82ec4d3
Author: Andrew Cagney <cag...@gnu.org>
Date: Tue Oct 10 14:23:45 2023 -0400
routing: handle DELETE_CHILD, ROUTED_NEGOTIATION, PERMANENT
commit 36e23676f7a98aff31c0a174df2c0218fbb3cef7
Author: Andrew Cagney <cag...@gnu.org>
Date: Tue Oct 10 13:24:01 2023 -0400
routing: in install_inbound_ipsec_kernel_policies() allow owner
In install_inbound_ipsec_kernel_policies() only skip installing
policy when the routing owner is some other Child SA.
For transitions such as:
ROUTED_ONDEMAND->ROUTED_NEGOTIATION->ROUTED_INBOUND
.newest_routing_sa will be set (if the bug is fixed) while
installing the connection's negotiation policy.
_______________________________________________
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit
