New commits:
commit 4737f02161a0b65a4be945f6e2ba4c833e259092
Author: Andrew Cagney <[email protected]>
Date: Tue Jan 23 17:34:49 2024 -0500
replace: document how code uses POLICY=LEMPTY to skip child
I can only hope this is deliberate.
When an IKE (ISAKMP) SA is being replaced it passes POLICY=LEMPTY
into the initiate code. The initiate code then, since LEMPTY has
no IPSEC Policy skips putting the connection on the Child SA
pending queue.
For IKEv2, the revival code kicks in and puts the Child SA
onto pending (see ikev2-child-ipsec-replace-ike).
BTW, the code originally used st->st_policy&~IPSEC_POLICY_MASK
but that can be reduced to LEMPTY.
commit 5d2f4271b7e1da15c49d3000d2b8b2a0dbac8f1a
Author: Andrew Cagney <[email protected]>
Date: Tue Jan 23 20:43:18 2024 -0500
includes: replace HAS_IPSEC_POLICY() with != LEMPTY
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
