Re: [Swan-dev] IKEv1 and XFRMi interface

2020-09-29 Thread Antony Antony
On Wed, Sep 16, 2020 at 09:53:49AM -0400, Paul Wouters wrote: > On Wed, 16 Sep 2020, Antony Antony wrote: > > > I had a quic look. IKEv1 need extra message (3 round trips) as opposed to > > IKEv2(2 round trips). And initiator is installing policies in different > > order. > > Yes, I mentioned thi

Re: [Swan-dev] IKEv1 and XFRMi interface

2020-09-16 Thread Paul Wouters
On Wed, 16 Sep 2020, Antony Antony wrote: I had a quic look. IKEv1 need extra message (3 round trips) as opposed to IKEv2(2 round trips). And initiator is installing policies in different order. Yes, I mentioned this in the team email two days ago. That is indeed the source of the problem. t

Re: [Swan-dev] IKEv1 and XFRMi interface

2020-09-15 Thread Antony Antony
I had a quic look. IKEv1 need extra message (3 round trips) as opposed to IKEv2(2 round trips). And initiator is installing policies in different order. the test outputs as it is now are confusing because it seems a copy of IKEv2 outputs. May be create tests with eastnet-westnet, delete IKEv2

[Swan-dev] IKEv1 and XFRMi interface

2020-09-04 Thread Paul Wouters
On Fri, 4 Sep 2020, Antony Antony wrote: https://testing.libreswan.org/v3.30-1548-g6ff4d70e27-main/ikev2-xfrmi-01/ showing up as pass. So I am not following the issue. Lets discuss this further on swan-dev! That is an ikev2 test case, not an ikev1 test case. kvmplutotestikev1-xfrmi-01