Re: [Swan-dev] shared IKE SA interop bug with cisco

2014-12-04 Thread Antony Antony
On Thu, Dec 04, 2014 at 04:31:50PM -0500, Matt Rogers wrote: > On 11/30, Paul Wouters ? wrote: > > On Fri, 28 Nov 2014, Matt Rogers wrote: > > > > >>Matt wrote the problem below. I am still confused what exactly is > > >>happening and why we would need his patch for this. I would think > > >>that

Re: [Swan-dev] shared IKE SA interop bug with cisco

2014-12-04 Thread Matt Rogers
On 11/30, Paul Wouters ? wrote: > On Fri, 28 Nov 2014, Matt Rogers wrote: > > >>Matt wrote the problem below. I am still confused what exactly is > >>happening and why we would need his patch for this. I would think > >>that if we --down tunnelA we should notice the phase1 is still used > >>by tun

[Swan-dev] a pexecpt/??? comment answer :)

2014-12-04 Thread Paul Wouters 🔓
Hi, At some time, Hugh added the follow pexpect() in ikev1_agg.c: static stf_status aggr_inI1_outR1_common(struct msg_digest *md, int authtype) { [...] struct state *st; struct payload_digest *const sa_pd = md->chain[ISAKMP_NEXT_SA];