New commits:
commit 098109a8aba28bcebc0994284a98d7d4c9a8c977
Author: Andrew Cagney <[email protected]>
Date: Sun Apr 14 17:28:27 2024 -0400
ikev2: fix deadlocking IKE SA deletes
When initiating an IKE SA delete, don't transition the IKE SA to
STATE_V2_IKE_SA_DELETE as this causes all inbound requests, such as a
crossing IKE SA delete, to be ignored.
Instead accept exchanges and assume the exchange processor can handle
the crossing stream. For instance receiving a delete IKE SA request
while waiting for response just deletes the IKE SA.
Also rename the state STATE_V2_IKE_SA_DELETE to the placeholder
STATE_V2_ZOMBIE. Once "deleted", the IKE SA should linger for a short
while so that it can respond to retransmitted delete IKE SA requests.
Later.
commit f1f8eb9748a49a3049d29a4da9cd0e2f5bf13ec2
Author: Andrew Cagney <[email protected]>
Date: Sun Apr 14 17:27:53 2024 -0400
testing: expect "established IKE SA", not STATE_IKESA_DEL
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
