[strongSwan-dev] [PATCH] child-sa: do not install unneeded transport mode policies

Martin Willi martin at strongswan.org
Wed Aug 27 10:25:02 CEST 2014

> > If a transport mode wildcard policy is installed, separate per
> > child-sa with expanded dynamic entries is not needed. 

> Forgot to mention that this is on top of trap-sa branch.

Tobias probably can comment better on that one.

> I should probably send the my whole set as a patchset, or pull request.

I personally prefer email patchsets, but pull requests are fine as well.

> Oh, and there's bug in "swanctl --log" (and also the new --monitor)
> that if the daemon exists, swanctl never exists or reconnects.

Yes, that currently does not work. Probably requires some changes to
libvici itself, as socket handling is done asynchronously.


More information about the Dev mailing list