On Wed, 30 Sep 2015, D. Hugh Redelmeier wrote:
dpd-01 good => bad This might MATTER. west # ipsec eroute -0 192.1.2.45/32 -> 192.1.2.23/32 => %trap +0 192.1.2.45/32 -> 192.1.2.23/32 => tun0x1002@192.1.2.23
That's a timing thing of the test. with very short DPD times you sometimes get the dpdaction timed differently and it shows up as a tun -> trap or trap -> tun difference.
ikev2-liveness-01-netkey New. Missing east reference log. "westnet-eastnet-ipv4-psk-ikev2" #2: EXPECTATION FAILED at /source/programs/pluto/ikev2_parent.c:3943: !IS_CHILD_SA(st) ikev2-liveness-01-netkey-drop New. Passed. "westnet-eastnet-ipv4-psk-ikev2" #2: EXPECTATION FAILED at /source/programs/pluto/ikev2_parent.c:3943: !IS_CHILD_SA(st)
We know this needs fixing. It is waiting on the new state names that more clearly seperate parent and child sa's.
interop-ikev2-strongswan-19-x509-res-certreq bad => bad (east: ok, an improvement)
I'll check that one out. Paul _______________________________________________ Swan-dev mailing list Swan-dev@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-dev