Hi Paul, I tested this patch with geneve and vxlan IPsec tunnels. They both work! Thanks you so much for fixing this bug!
Thanks, Qiuyu On Tue, Sep 4, 2018 at 6:23 PM Paul Wouters <p...@nohats.ca> wrote: > > On Thu, 2 Aug 2018, Qiuyu Xiao wrote: > > > I tried to use LibreSwan to encrypt traffic for geneve protocol but failed. > > We found the issue and pushed a fix which will be in libreswan 3.26. You > can find a patch here: > > https://github.com/libreswan/libreswan/commit/9d52ef1a3559d55cd7077edfabd01b14dd7e74f7 > > It caused us to look at the wrong traffic selectors so when the > connection found the any to single port conn it would not properly > switch to the single to any port conn. > > Please let us know if this resolves all your issues to get the geneve > protocol working. > > Paul _______________________________________________ Swan mailing list Swan@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan