diff options
| author | Alexander Bluhm <bluhm@cvs.openbsd.org> | 2008-07-01 14:08:40 +0000 |
|---|---|---|
| committer | Alexander Bluhm <bluhm@cvs.openbsd.org> | 2008-07-01 14:08:40 +0000 |
| commit | e10672951adbd7ce81e6c837f4121f6da9508bf9 (patch) | |
| tree | f20a818f1af81119218a76d47488c625325653f5 /regress/sbin/ipsecctl/ipsecfail3.ok | |
| parent | d1633f38591d98b6174bc7606a4d55a94f6c8449 (diff) | |
If multiple to addresses but no peer are given in an ike or flow
rule, the current to address is taken as peer during expansion.
This makes the broken regress test ikefail7 obsolete as address
family mismatch cannot happen anymore.
ok hshoexer
Diffstat (limited to 'regress/sbin/ipsecctl/ipsecfail3.ok')
| -rw-r--r-- | regress/sbin/ipsecctl/ipsecfail3.ok | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/regress/sbin/ipsecctl/ipsecfail3.ok b/regress/sbin/ipsecctl/ipsecfail3.ok new file mode 100644 index 00000000000..c85057213a5 --- /dev/null +++ b/regress/sbin/ipsecctl/ipsecfail3.ok @@ -0,0 +1,4 @@ +stdin: 2: no peer specified for destination 3.3.3.0/24 +ipsecctl: Syntax error in config file: ipsec rules not loaded +flow esp out from 1.1.1.1 to 2.2.2.2 peer 2.2.2.2 type require +flow esp in from 2.2.2.2 to 1.1.1.1 peer 2.2.2.2 type require |