[ovs-build] Broken: openvswitch/ovs#3251 (master - 19cd0a8)

[Travis CI]

Build Update for openvswitch/ovs
-------------------------------------

Build: #3251
Status: Broken

Duration: 58 minutes and 52 seconds
Commit: 19cd0a8 (master)
Author: Ansis Atteka
Message: ipsec: Do not allow ipsec_gre tunnel traffic to exit unencrypted

If ipsec_gre tunnel configuration is changed in OVSDB,
then GRE packets may sometimes exit unencrypted until
per-tunnel IPsec policies are installed by ovs-monitor-ipsec
daemon.

This patch fixes this issue by installing single, low
priority IPsec block policy that drops all GRE packets
coming out from ipsec_gre tunnels that do not have yet
their own IPsec policies installed.

This patch depends on to two other recently committed
patches:
1. 574ff4aa (tunneling: get skb marking to work
   properly with tunnels)
2. ca3574d5 (IPsec: refactor out some code in
   OVS_MONITOR_IPSEC_START macro)

Signed-off-by: Ansis Atteka <aatteka at ovn.org>
Reported-by: Steffen Birkeland <Steffefb at stud.ntnu.no>
Acked-by: Jesse Gross <jesse at kernel.org>

View the changeset: https://github.com/openvswitch/ovs/compare/a4e68acd9d2d...19cd0a87827e

View the full build log and details: https://travis-ci.org/openvswitch/ovs/builds/156362409

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.openvswitch.org/pipermail/ovs-build/attachments/20160831/3f25a30b/attachment-0002.html>