neutron

  1. Bug #1781354
  2. Comment #6

Comment 6 for bug 1781354

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron-vpnaas (master)

Reviewed: https://review.openstack.org/582113
Committed: https://git.openstack.org/cgit/openstack/neutron-vpnaas/commit/?id=321392b9a7d288167b0155284c0b7d30af44e5b3
Submitter: Zuul
Branch: master

commit 321392b9a7d288167b0155284c0b7d30af44e5b3
Author: Dongcan Ye <email address hidden>
Date: Thu Jul 12 09:00:13 2018 +0000

    Match IPSEC SA established state

    While using IKE policy with version v2,
    the IPsec siteconnection status always down.
    From librewan wiki[1], the "phase2" in IKEv2 mistakenly
    calls itself a PARENT SA which same as "phase1",
    This is a known bug for some versions of libreswan.

    For the newer versions of libreswan(3.20+),
    the "IPsec SA established" will successful output if
    phase2 state established.

    Here we match the "established" and "newest IPSEC" for
    an established IPSEC SA.

    [1] https://libreswan.org/wiki/How_to_read_status_output

    Change-Id: Iffff7d00f48e69fbc53bb45df17d6a5be6760a6d
    Closes-Bug: #1781354