The tests seem to have gotten fairly consistent. There is a still a group of problems:
- dpd / liveness tests need a redesign to avoid constant false positives - ipv6 tests have unexplained packet flow issues - some traffic counters are off by a byte or 3. seems our kernels might differ? - not yet valid tests are failing for unknown reasons - "MS+S=C" string mismatch due to auto-detect modecfgserver based on addresspool (printing of that string needs fixing, but its a rat hole) Some specific test cases of interest: xauth-pluto-24-static-addresspool shows the group ID with PSK lease problem xauth-pluto-22 same nss-cert-crl-03 missing issuer line? newoe-08-ike-replace-responder additional unexplained policies some strongswan psk tests they gained a cert despite swan-prep wiping them? ikev2-10-2behind-nat not sure, lots of things going wrong? Paul _______________________________________________ Swan-dev mailing list Swan-dev@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-dev