On 2017/11/30 18:20, Patrick Wildt wrote: > Hi, > > the RFC specifies that in an SA payload the proposals must be numbered > starting with number 1. Subsequent proposals must be one more than the > previous proposal. > > Since IKE SA proposals and Child SA proposals are a different list, > we must make sure that both proposals start with proposal #1. Since > our code uses the policy's number of proposals, which contains both > IKE and Child SA proposals, the Child SA proposal we send out starts > with proporsal #2. Strongswan doesn't trip, but since it's a MUST in > the RFC I would like to rectify this. > > ok?
Also OK.
