Ondrej Moris

Child SA duplicated on one side only, kernel picks outbound SA without matching inbound SA on the other side

11

### Please Tell Us About Your System We are running a cluster with hundeds of nodes and each node is establishing IPsec tunnel to all other nodes. The configuration is...

Expect no IKE only for orphan child

3

When terminating v2 states, CONNECTION_CUCKOO_CHILD SA does have IKE SA and hence we cannot expect it being NULL. Resolves #2101.

plans: enable epel on CentOS Stream in provision/virtual.py

4

Prepare step of `/plans/provision/virtual` installs beakerlib on virtual machine images. This does not work for CentOS Stream because you need to enable EPEL to be able to install beakerlib. This...

ikev2: addres IKE_AUTH crossing streams

18

To prevent crossing streams issues, responder now rejects IKE_AUTH requests with TEMPORARY_FAILURE message if it has IKE_AUTH requests for the same connection outstanding. This is a first attempt to address...

Race condition in helper_thread_stopped_callback()

12

### Please Tell Us About Your Operating System - RHEL-10 / Fedora-41 - libreswan-5.1, 5.2 and 5.3 ### Please Describe Your IPsec Configuration - No connections, default configuration ### Please...

Orphaned IKE SA after Child SA switched

6

### Please Tell Us About Your Operating System Fedora 42, libreswan-5.3 ### Please Describe Your IPsec Configuration ``` config setup uniqueids=yes conn %default keyingtries=%forever type=transport auto=route ike=aes_gcm256-sha2_256 esp=aes_gcm256 ikev2=insist conn...

IKE_AUTH requests crossed

6

### Please Tell Us About Your Operating System - RHEL / Fedora - libreswan-5.3 - kernel-6.12 ### Please Describe Your IPsec Configuration ``` LEFT ==== conn test type=transport authby=secret auto=add...

Is the a better name than allow-competing-ike-auth?

2

### Please Tell Us About Your Operating System N/A ### Please Describe Your IPsec Configuration N/A ### Please Tell Us What Happened? In #2447 I proposed new conn option name...