New commits:
commit f0325d45781ed4fc9749a5a964c3d466ad37062e
Merge: 8593d586b1 40e96c074c
Author: Andrew Cagney <cag...@gnu.org>
Date: Tue Sep 16 13:37:49 2025 -0400
Merge ikev2: when template lacks subnet=, use ${host} when matching TS
close #2380 IKEv2: Multiple host to subnet tunnels to same responder can
result in TS_UNACCEPTABLE
commit 40e96c074cc7ec72b85c6520c58aea437f91ef9e
Author: Andrew Cagney <cag...@gnu.org>
Date: Tue Sep 16 13:17:34 2025 -0400
ikev2: when no subnet=, use subnet=${host} to search for template matching
TS
When a connection does not specify {left,right}subnet=, the subnet
(selector) is defaulted to the host address converted to a selector.
When searching for a better template connection matching TS, and a
template end does not specify subnet=, use the template connection's
end's host address (converted) as the selector.
see #2380 IKEv2: Multiple host to subnet tunnels to same responder can
result in TS_UNACCEPTABLE
commit b1a2f5cee2f36fb55d4a50e10a4b6072fee6d515
Author: Andrew Cagney <cag...@gnu.org>
Date: Mon Sep 15 21:51:24 2025 -0400
testing: add ikev2-connswitch-06-host-net-template
as clone of ikev2-connswitch-06-net-net-template tweaked per @wofferl:
- drop leftsubnet= forcing leftsubnet= to default to left/32
- it should conswitch to an alternative conn with implicit
leftsubnet=${left}
see #2380 IKEv2: Multiple host to subnet tunnels to same responder can
result in TS_UNACCEPTABLE
commit 860e4e79123b5df7fd0457fb8bf638b9f9e0a987
Author: Andrew Cagney <cag...@gnu.org>
Date: Mon Sep 15 21:51:24 2025 -0400
testing: rename ikev2-06-dual-net* tests
ikev2-06-dual-net -> ikev2-connswitch-06-net-net-template
ikev2-06-dual-net-notany -> ikev2-connswitch-06-net-net-permanent
commit dbb2f8b12709e7217155c040c2558407cb6cace3
Author: Andrew Cagney <cag...@gnu.org>
Date: Tue Sep 16 13:16:36 2025 -0400
ip: include family, even when IP is unset
For instance, ip_info .address .unset has family set to IPv4.
_______________________________________________
Swan-commit mailing list -- swan-commit@lists.libreswan.org
To unsubscribe send an email to swan-commit-le...@lists.libreswan.org
