[Swan-commit] Changes to ref refs/heads/master

2019-07-03 Thread Paul Wouters
New commits: commit eb18b316d8715a5fbbe22561fd6304f34c352e40 Author: Paul Wouters Date: Wed Jul 3 23:25:16 2019 -0400 KLIPS: support for kernels >= 4.19 with SYNC_SKCIPHER_REQUEST_ON_STACK ___ Swan-commit mailing list

[Swan-commit] Changes to ref refs/heads/master

2019-07-03 Thread D. Hugh Redelmeier
New commits: commit b1003cb76da681600fe429bea3dd6d4728bef0df Author: D. Hugh Redelmeier Date: Wed Jul 3 23:45:05 2019 -0400 pfkey_v2_build.c: revert to c90 since that seems to be a Kernel Thing Note: this file is in two places in the tree

[Swan-commit] Changes to ref refs/heads/master

2019-07-03 Thread D. Hugh Redelmeier
New commits: commit cd9b2eb60844aae857e14959f15b8278d19af603 Author: D. Hugh Redelmeier Date: Wed Jul 3 23:38:09 2019 -0400 pfkey_v2_build.c: resynchronize the two copies Missed in 226afc3fc06. We really should not have two copies.

[Swan-commit] Changes to ref refs/heads/master

2019-07-03 Thread D. Hugh Redelmeier
New commits: commit b80e1fc5f892de949ea10c0b0d9e5eef1bffd200 Author: D. Hugh Redelmeier Date: Wed Jul 3 23:01:03 2019 -0400 linux/net/ipsec/ipsec_tunnel.c: fix #ifdef to respect brace-nesting Busted by fc5da93ad4d ___ Swan-commit

[Swan-commit] Changes to ref refs/heads/master

2019-07-03 Thread Andrew Cagney
New commits: commit 04340e4105bbe6ff76b0c2998adc8ea9dc84c030 Author: Andrew Cagney Date: Wed Jul 3 17:16:24 2019 -0400 logging: in ikev2_process_packet() always use rate_log(md, ...) Just assume that any error messages when there's no matching IKE SA are due to DDOS.

[Swan-commit] Changes to ref refs/heads/master

2019-07-03 Thread Andrew Cagney
New commits: commit ba28eece84a7ca5e93d199aee8d9ccb7d48e83db Author: Andrew Cagney Date: Wed Jul 3 17:09:54 2019 -0400 ikev2: find the IKE SA (by IKE SPIs) and then find the ST (by Message ID) as two distinct steps For the latter, alsl add notes pointing out how the 'find the ST

[Swan-commit] Changes to ref refs/heads/master

2019-07-03 Thread Paul Wouters
New commits: commit 499ffd102def4295a51cb8cd81715e1a78ba7cb7 Author: Paul Wouters Date: Wed Jul 3 17:47:19 2019 -0400 testing: swan-transmogrify: don't install obsolete hostnames in hosts file commit 087687863d10b7b8cc27e4ef97ce912caf1db4e0 Author: Paul Wouters Date: Wed Jul 3 16:16:34

[Swan-commit] Changes to ref refs/heads/master

2019-07-03 Thread Andrew Cagney
New commits: commit cb12cc866e2f6469d21b7888bc90bc2bdc84854f Author: Andrew Cagney Date: Wed Jul 3 16:47:32 2019 -0400 ikev2: cleanups 'cos IKE and then ST is never NULL Eliminate some redundant checks and dead code. ___ Swan-commit

[Swan-commit] Changes to ref refs/heads/master

2019-07-03 Thread Andrew Cagney
New commits: commit 46940c94b47b353128ee00bc19e557622516e9e6 Author: Andrew Cagney Date: Tue Jul 2 17:05:52 2019 -0400 ikev2: eliminate SMF2_IKE_I_{SET,CLEAR} bits in state machine The IKE lookup code made them redundant: - the IKE SA's role is used when searching for the

[Swan-commit] Changes to ref refs/heads/master

2019-07-03 Thread Andrew Cagney
New commits: commit 4948f0d48640b3484afd3b084030275a6eee6f44 Author: Andrew Cagney Date: Wed Jun 26 12:24:33 2019 -0400 natd: pass the endpoint into natd_hash() Replace iface->ip_addr,iface->ip_port pair with iface->local_endpoint, and md->sender,hportof(>sender) with