New commits:
commit 6fa3a8ac19a14fb1a70f5f9c7093d5bd22756aee
Merge: 93d7659b75 7eeadf8832
Author: Andrew Cagney <[email protected]>
Date: Mon Jun 9 12:39:31 2025 -0400
Merge whack: remove --pfsgroup
close #2246 whack merges --pfsgroup=dh1 --esp=.. before sending to pluto
commit 7eeadf8832eb3a4b4d9296294cad49198d55fc8c
Author: Andrew Cagney <[email protected]>
Date: Mon Jun 9 11:45:14 2025 -0400
documentation: update ipsec-whack(8), --pfsgroup removed
commit 4db055ea20b49e83257040928b20a52fb654a9e6
Author: Andrew Cagney <[email protected]>
Date: Mon Jun 9 11:38:40 2025 -0400
CHANGES ipsec whack: remove broken --pfsgroup option (have more robust
--{esp,ike})
commit af7628110157176607b31792ab1eb22a0de85b5f
Author: Andrew Cagney <[email protected]>
Date: Mon Jun 9 11:30:29 2025 -0400
whack: drop --pfsgroup=
It assumed appending ;DH to a crypto suite was global
which it hasn't been for a long time. Hence:
--ike=aes_cbc,aes_aead --pfsgroup dh21
results in:
aes_cbc
aes_aead;dh21
when the intent is probably:
aes_cbc;dh21
aes_aead;dh21
commit a56eaa69da6b8385f53de7f4c796a8b0e6f5343c
Author: Andrew Cagney <[email protected]>
Date: Mon Jun 9 11:29:02 2025 -0400
optarg: add FATAL_OPT()
for obsolete opts that should be rejected, rather than ignored
_______________________________________________
Swan-commit mailing list -- [email protected]
To unsubscribe send an email to [email protected]
