Re: delete-sa-01 test

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Sam" == Sam Sgro <[email protected]> writes:
    Sam> I've created a UML test which demonstrates Delete SA functionality,
    Sam> delete-sa-01. I know I may not have all the code bits in the right
    Sam> place; the test isn't turned on, and I'm trying to subscribe to the
    Sam> "commit code early" philosophy.

    Sam> Expect the test to fail when formally running it; I haven't figured
    Sam> out how to suppress the variable elements from the ping test I
    Sam> employ (the summary line, which will almost always vary).

  okay, i have done this.

  The script code is a bit confusing because you do actions in the init
scripts, and final stuff in the run scripts.
  I've moved things a bit for this.

    Sam> Why the requirement for the low IPSec SA lifetime? It appears that
    Sam> on "ipsec auto --delete connname", a Delete SA request for the
    Sam> ISAKMP SA gets issued...  but never for the IPSec SA. As a result,
    Sam> the Delete SA is received, but the Roadwarrior conn stays up.

    Sam> Mathieu: given that both SAs are in the process of being deleted, is
    Sam> there a logic to not sending a delete for the IPSec SA as well?

  Mathieu, again, I'd really like to help you get the user-mode-linux
testsing environment alive. Let me know how I can help this occur for
you.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] [email protected] http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBPkbTxoqHRg3pndX9AQHhUwQAoYRf2uYZATpArIJo93b8WSFW6Oi9qZ9D
UwOq8PFow/wjjBEGnPSIdUBAw8EemR1tiL56luq0FBf6+DlLmAWNUCwUukYYcKBA
aPMVh/V2iNJM6srCY6J9tWenaZmWKGhYHETZjW4Aze8Ue5AquuuZRjcPqvQ9sUri
5SEW5wW/Wx8=
=hjHc
-----END PGP SIGNATURE-----