From: Alexander Bluhm (bluhmcvs.openbsd.org)
Date: Tue Jul 01 2008 - 09:08:39 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

CVSROOT: /cvs
Module name: src
Changes by: bluhmcvs.openbsd.org 2008/07/01 08:08:39

Modified files:
        sbin/ipsecctl : parse.y
        regress/sbin/ipsecctl: Makefile ipsec23.ok ipsec24.ok
Added files:
        regress/sbin/ipsecctl: ipsec54.in ipsec54.ok ipsec55.in
                               ipsec55.ok ipsec56.in ipsec56.ok
                               ipsec57.in ipsec57.ok ipsecfail3.in
                               ipsecfail3.ok
Removed files:
        regress/sbin/ipsecctl: ikefail7.in ikefail7.ok

Log message:
If multiple to addresses but no peer are given in an ike or flow
rule, the current to address is taken as peer during expansion.
This makes the broken regress test ikefail7 obsolete as address
family mismatch cannot happen anymore.
ok hshoexer

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]