New commits:
commit 550232aee0e265cd8b34f6b7f6569ab885822efb
Author: Daiki Ueno <[email protected]>
Date: Tue Jul 2 20:37:07 2024 +0900
tcp: call kernel_ops->poke_ipsec_policy_hole before connect
This fixes ondemand initiation with TCP. Without the policy hole, a
TCP handshake will not complete, as it cannot receive SYN-ACK packet
in plaintext and thus connect blocks until timeout.
Signed-off-by: Daiki Ueno <[email protected]>
Signed-off-by: Andrew Cagney <[email protected]>
commit 1a72662a2565bb3421fa4d4972611e30c11efbb2
Author: Daiki Ueno <[email protected]>
Date: Tue Jul 2 20:46:29 2024 +0900
testing: add basic-pluto-14-netkey-ondemand-tcp
Signed-off-by: Daiki Ueno <[email protected]>
Signed-off-by: Andrew Cagney <[email protected]>
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
