Re: [Swan-dev] IKEv1 and XFRMi interface

2020-09-29 Thread Antony Antony
On Wed, Sep 16, 2020 at 09:53:49AM -0400, Paul Wouters wrote: > On Wed, 16 Sep 2020, Antony Antony wrote: > > > I had a quic look. IKEv1 need extra message (3 round trips) as opposed to > > IKEv2(2 round trips). And initiator is installing policies in different > > order. > > Yes, I mentioned thi

[Swan-dev] unstable connection serial numbers

2020-09-29 Thread Andrew Cagney
I'm trying to understand this diff https://testing.libreswan.org/v3.30-1853-gc4b35c42cb-main/newoe-25-cat-2/OUTPUT/road.console.diff -000 "block": newest ISAKMP SA: #0; newest IPsec SA: #0; conn serial: $9; +000 "block": newest ISAKMP SA: #0; newest IPsec SA: #0; conn serial: $5; Pluto is rec