[ovs-build] Broken: openvswitch/ovs#3276 (branch-2.6 - 87e731f)

Travis CI builds at travis-ci.org
Thu Sep 1 15:58:47 UTC 2016


Build Update for openvswitch/ovs
-------------------------------------

Build: #3276
Status: Broken

Duration: 47 minutes and 17 seconds
Commit: 87e731f (branch-2.6)
Author: Ansis Atteka
Message: ipsec: Do not allow ipsec_gre tunnel traffic to exit unencrypted

If ipsec_gre tunnel configuration is changed in OVSDB,
then GRE packets may sometimes exit unencrypted until
per-tunnel IPsec policies are installed by ovs-monitor-ipsec
daemon.

This patch fixes this issue by installing single, low
priority IPsec block policy that drops all GRE packets
coming out from ipsec_gre tunnels that do not have yet
their own IPsec policies installed.

This patch depends on to two other recently committed
patches:
1. 574ff4aa (tunneling: get skb marking to work
   properly with tunnels)
2. ca3574d5 (IPsec: refactor out some code in
   OVS_MONITOR_IPSEC_START macro)

Signed-off-by: Ansis Atteka <aatteka at ovn.org>
Reported-by: Steffen Birkeland <Steffefb at stud.ntnu.no>
Acked-by: Jesse Gross <jesse at kernel.org>

View the changeset: https://github.com/openvswitch/ovs/compare/827539869ff3...87e731f0b5ba

View the full build log and details: https://travis-ci.org/openvswitch/ovs/builds/156838691

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.openvswitch.org/pipermail/ovs-build/attachments/20160901/352ac7bd/attachment-0002.html>


More information about the build mailing list