New commits: commit 3e27198be0364441321a3610a77bdbe6901956e4 Author: Andrew Cagney <cag...@gnu.org> Date: Thu Oct 26 08:58:32 2023 -0400
addconn: document pfs-rekey-workaround as it works today; ref #1265 commit 0c4bbbf3a048c1f28ac93111c7e5a917f0b413c5 Author: Andrew Cagney <cag...@gnu.org> Date: Wed Oct 25 18:09:18 2023 -0400 ikev2: given esp=algs-dh+pfs=yes rekey first child using algs-dh Given an IKE AUTH Child SA (which hasn't negotiated DH) and pfs=true and esp=algs-dh, rekey with algs-dh and not OLD_ALG+IKE_DH. Can't assume esp=algs-dh includes IKE_DH fix #1347; ref #1265 _______________________________________________ Swan-commit mailing list Swan-commit@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-commit