openstack
/
neutron-vpnaas
Code Issues Proposed changes
neutron-vpnaas/neutron_vpnaas/services/vpn/device_drivers
History
Dongcan Ye 321392b9a7 Match IPSEC SA established state 
While using IKE policy with version v2,
the IPsec siteconnection status always down.
From librewan wiki[1], the "phase2" in IKEv2 mistakenly
calls itself a PARENT SA which same as "phase1",
This is a known bug for some versions of libreswan.

For the newer versions of libreswan(3.20+),
the "IPsec SA established" will successful output if
phase2 state established.

Here we match the "established" and "newest IPSEC" for
an established IPSEC SA.

[1] https://libreswan.org/wiki/How_to_read_status_output

Change-Id: Iffff7d00f48e69fbc53bb45df17d6a5be6760a6d
Closes-Bug: #1781354
 		2018-08-14 03:11:39 +00:00
..
template Make libreswan driver work with recent versions 2018-06-22 15:29:48 +08:00
__init__.py Split vpnaas services code into neutron-vpnaas 2014-12-08 13:37:08 -07:00
ipsec.py Match IPSEC SA established state 2018-08-14 03:11:39 +00:00
libreswan_ipsec.py Make libreswan driver work with recent versions 2018-06-22 15:29:48 +08:00
strongswan_ipsec.py Enable some off-by-default checks 2017-07-21 09:57:46 +07:00