New commits:
commit 3802512b511d6f48719fd12088cf1e4a22de46c4
Merge: 1228284782 23d62785ed
Author: Andrew Cagney <cag...@gnu.org>
Date:   Fri Jun 20 15:57:36 2025 -0400

    Merge ipsec down: don't down the Child SA's +UP IKE SA
    
    close #2310 don't down the other sole parent when it's +UP

commit 23d62785ed81436887bfd3a501b43d110ac796b7
Author: Andrew Cagney <cag...@gnu.org>
Date:   Fri Jun 20 14:36:10 2025 -0400

    testing: update 'ipsec down' log messages when "shared"

commit 6d05722c6f3fbde699c5343967b438c479dd9bed
Author: Andrew Cagney <cag...@gnu.org>
Date:   Fri Jun 20 10:38:47 2025 -0400

    ipsec down: don't delete IKE SA when it has policy +UP
    
    For instance, a Child SA #2 for connection "A", has IKE SA #1 from
    connection "B" and and both "A" and "B" are +UP.
    
    `ipsec down` should take down the Child SA, but not the IKE SA
    even though the IKE SA has no other children - can't argue
    with the +UP bit.
    
    Also revamp log messages: one line for delete; one line with
    all the reason for keeping the IKE SA up.
    
    see #2310 don't down the other sole parent when it's +UP

_______________________________________________
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send an email to swan-commit-le...@lists.libreswan.org

Reply via email to