[Swan-commit] Changes to ref refs/heads/master

2014-06-05 Thread Paul Wouters
New commits:
commit 4447f1c083d448800db646d2aa0f3ce2c65c3ee5
Author: Paul Wouters pwout...@redhat.com
Date:   Thu Jun 5 12:07:42 2014 -0400

algparse: more updates to tests and expected output

tests that don't properly fail or don't properly success only have
their expected prefixes set to OK/ERROR so the test fails properly

commit 65dc62c51fa8cd63f90c5bee6df709ac21dc1619
Author: Paul Wouters pwout...@redhat.com
Date:   Thu Jun 5 11:44:04 2014 -0400

testing: add testcase for esp=aes-sha1555 to fail properly

commit a7fc9a4915876784bbd5d7e84f7a1d494a86340c
Author: Paul Wouters pwout...@redhat.com
Date:   Thu Jun 5 11:26:39 2014 -0400

auto: fixup man page and remove obsoleted options

options removed are related to aacerts and acerts.

Also the --show option was removed from man page and usage, as it
did not do anything - it used to set -x in shell scripts but we
don't call any shell scripts anymore. --showonly still works.

___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit


[Swan-commit] Changes to ref refs/heads/master

2014-06-05 Thread D. Hugh Redelmeier
New commits:
commit f0067c9fde6abe1b1cbd356c9c75a130360114a2
Author: D. Hugh Redelmeier h...@mimosa.com
Date:   Thu Jun 5 21:59:36 2014 -0400

ikev2_delete_desc: use ft_enum for protocol ID for better checking

___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit


[Swan-commit] Changes to ref refs/heads/master

2014-06-05 Thread Paul Wouters
New commits:
commit f5916aebe1d167eb27d5402758de33b56814d03d
Author: Paul Wouters pwout...@redhat.com
Date:   Fri Jun 6 01:15:03 2014 -0400

IKEv2: Fix process_informational_ikev2() for Delete payloads [Paul/Hugh]

An incomplete Child SA has the same SPIs as its Parent SA and could
accidentally be matched by the state machine to process the Informational
Exchange. If such informational message contained an IKE SA Delete
payload, it would trigger a passert in v2_delete_my_family() which
insisted to be given a Parent SA. We now switch to the parent if detected.

The RFC forbids mixing IKE and IPsec Deletes. IKE SA delete payload
SPI numbers and SPI size MUST be zero. This was not enforced.

Syntax errors in Delete payloads were ignored instead of failed.

Convoluted SPI logging simplified.

commit a5a70ff1d7b1bd372af4598e394b4ab5e2b00255
Author: Paul Wouters pwout...@redhat.com
Date:   Fri Jun 6 01:14:35 2014 -0400

updated comments in state.h

commit a9f2b106fa90deef61c9eec6f4fedadf9e708afe
Author: Paul Wouters pwout...@redhat.com
Date:   Fri Jun 6 01:13:50 2014 -0400

minor cleanup in state.c

commit 91d37c9d0a310a2a93338aab039055791ba63a13
Author: Paul Wouters pwout...@redhat.com
Date:   Fri Jun 6 01:13:12 2014 -0400

update a comment

commit d36225e7a3b29067b415843b82576f873121e4e4
Author: Paul Wouters pwout...@redhat.com
Date:   Fri Jun 6 01:12:27 2014 -0400

Add comment to process_v2_packet() got lsb#185

commit cc6b565dfdc084e2a5f501b120b440b4bad20cd8
Merge: ede0f7c f0067c9
Author: Paul Wouters pwout...@redhat.com
Date:   Thu Jun 5 22:08:15 2014 -0400

Merge branch 'master' of ssh://vault.foobar.fi/srv/src/libreswan

commit ede0f7c58831c2d643256cd45b2db02aa72bcc28
Author: Paul Wouters pwout...@redhat.com
Date:   Thu Jun 5 13:22:21 2014 -0400

testing: ikev2-algo-sha2-06 needs different esp= line to trigger the bug

___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit