New commits: commit 2234394e679dfc5337bab7d947c09c770bbf30b1 Merge: f2f4da896c cbe724b403 Author: Andrew Cagney <cag...@gnu.org> Date: Fri Aug 15 09:31:55 2025 -0400
Merge ikev2: remove more code playing with SPIs and secrets in IKE_INTERMEDIATE Not needed. commit cbe724b403d0f04c32b204c8af07ed02f9010291 Author: Andrew Cagney <cag...@gnu.org> Date: Thu Aug 14 15:46:07 2025 -0400 ikev2: in process_v2_IKE_INTERMEDIATE_response() don't release .st_dh_shared_secret The hack was added so that a, since removed, DH calculation could use that as a temp field. ref #2398 release .st_dh_shared_secret during IKE_SA_INIT commit 256b76779e257adfd6024807c926ff0d69bbb451 Author: Andrew Cagney <cag...@gnu.org> Date: Thu Aug 14 15:44:51 2025 -0400 ikev2: release PPK SKEYSEED in recalc_v2_ike_intermediate_ppk_keymat() which is where it was allocated (not in recalc_v2_ike_intermediate_keymat() which is behind recalc_v2_ike_intermediate_ppk_keymat()'s back). commit 7bf591f162d6e89d0e0af26f6bf8d870e2b2cbda Author: Andrew Cagney <cag...@gnu.org> Date: Thu Aug 14 15:36:42 2025 -0400 ikev2: in process_v2_IKE_INTERMEDIATE_response() drop code updating IKE SPIs The SPIs can't change. follow-up #2393 why call update_st_ike_spis_responder() from process_v2_IKE_INTERMEDIATE_request() _______________________________________________ Swan-commit mailing list -- swan-commit@lists.libreswan.org To unsubscribe send an email to swan-commit-le...@lists.libreswan.org