On Wed, 30 Sep 2015, D. Hugh Redelmeier wrote:

dpd-01
        good => bad
        This might MATTER.
west #
 ipsec eroute
-0          192.1.2.45/32      -> 192.1.2.23/32           => %trap
+0          192.1.2.45/32      -> 192.1.2.23/32           => 
tun0x1002@192.1.2.23

That's a timing thing of the test. with very short DPD times you
sometimes get the dpdaction timed differently and it shows up
as a tun -> trap or trap -> tun difference.

ikev2-liveness-01-netkey
        New.  Missing east reference log.
"westnet-eastnet-ipv4-psk-ikev2" #2: EXPECTATION FAILED at 
/source/programs/pluto/ikev2_parent.c:3943: !IS_CHILD_SA(st)

ikev2-liveness-01-netkey-drop
        New.  Passed.
"westnet-eastnet-ipv4-psk-ikev2" #2: EXPECTATION FAILED at 
/source/programs/pluto/ikev2_parent.c:3943: !IS_CHILD_SA(st)

We know this needs fixing. It is waiting on the new state names that
more clearly seperate parent and child sa's.

interop-ikev2-strongswan-19-x509-res-certreq
        bad => bad (east: ok, an improvement)

I'll check that one out.

Paul
_______________________________________________
Swan-dev mailing list
Swan-dev@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-dev

Reply via email to