tteras/strongswan/src/libcharon/tests, branch master

child-rekey: Don't install outbound SA in case of lost collisions

2017-08-07T08:46:00+00:00

This splits the SA installation also on the initiator, so we can avoid
installing the outbound SA if we lost a rekey collision, which might
have caused traffic loss depending on the timing of the DELETEs that are
sent in both directions.

child-sa: Use flags to track installation of outbound SA and policies separately

2017-08-07T08:44:05+00:00

unit-tests: Stringify direction in message asserts early

2017-07-28T09:18:59+00:00

x86_64-w64-mingw32-gcc on Windows requires this.

Change interface for enumerator_create_filter() callback

2017-05-26T11:56:44+00:00

This avoids the unportable 5 pointer hack, but requires enumerating in
the callback.

unit-tests: Check installed IPsec SAs in child-rekey tests

2017-05-23T16:46:50+00:00

unit-tests: Add assert to check for installed IPsec SAs

2017-05-23T16:46:50+00:00

unit-tests: Migrate cached IPsec SAs to new IKE_SAs during rekeying

2017-05-23T16:46:49+00:00

unit-tests: Keep track of installed IPsec SAs in mock kernel_ipsec_t implementation

2017-05-23T16:46:49+00:00

child-delete: Delay the removal of the inbound SA of rekeyed CHILD_SAs

2017-05-23T16:46:49+00:00

After deleting a rekeyed CHILD_SA we uninstall the outbound SA but don't
destroy the CHILD_SA (and the inbound SA) immediately.  We delay it
a few seconds or until the SA expires to allow delayed packets to get
processed. The CHILD_SA remains in state CHILD_DELETING until it finally
gets destroyed.

child-sa: Remove state to track installation of half the SA again

2017-05-23T16:46:49+00:00