On Sat, 21 Sept 2024 at 08:39, Paul Wouters <[email protected]> wrote:
>
> On Sep 20, 2024, at 21:38, Libreswan VCS commit list 
> <[email protected]> wrote:
> >
> > New commits:
> > commit 3eff6edf91d694e75083daf7a441800c0f5d235c
> > Author: Andrew Cagney <[email protected]>
> > Date:   Fri Sep 20 21:36:37 2024 -0400
> >
> >    ipsec interface: when adding conn, don't scrape ipsec interface addresses
> >
> >    And drop struct kernel_ipsec_interface .ip_addr_get_all_ips()
> >
> >    close #1810 drop code slurping existing addresses in 
> > add_kernel_ipsec_interface()
>
> I believe this was there to support configuring xfrmi interfaces via systemd 
> outside of Pluto ?
>
> Does that still work now ?

Which test?

The code in add_kernel_ipsec_interface() has to check for and handle
an existing ipsec-interface with an existing address that magically
appearing.  For instance an ipsec-interface and address being manually
added between ADD and UP.  Same with a broken ipsec-interface being
removed - this is stuff @woferl's been sorting out.

I noticed, per #1810, that with this fixed, slurping the addresses
during ADD is no longer needed (and if anything will cause problems).
_______________________________________________
Swan-dev mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to