Branch: refs/heads/stable1 Home: https://github.com/kronosnet/kronosnet Commit: 49ef95aea3bb5a223ec12c2e33e855c8948c0204 https://github.com/kronosnet/kronosnet/commit/49ef95aea3bb5a223ec12c2e33e85… Author: Jan Friesse <jfriesse(a)redhat.com> Date: 2023-08-14 (Mon, 14 Aug 2023) Changed paths: M libknet/crypto.c Log Message: ----------- [crypto] Try crypt and decrypt on crypto_init Crypt (or decrypt) operation might fail in some cases even when initialization succeeded. This problem is known to happen when FIPS mode is enabled and combination of openssl/aes192 and md5 is used. This was not caught during crypto_init so knet user (corosync) was not aware of non-working crypto so it couldn't handle it - and couldn't send/receive any packets. Solution is to try crypt, decrypt and compare of result buffer right after new crypto_instance is created. If any of these operation fails, whole crypto_init fails, crypto_instance is freed and knet user is notified by receiving non-zero return code. Signed-off-by: Jan Friesse <jfriesse(a)redhat.com> Commit: cae7cafa5f0301df53eb8510638531b5d2932b5f https://github.com/kronosnet/kronosnet/commit/cae7cafa5f0301df53eb851063853… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2023-09-18 (Mon, 18 Sep 2023) Changed paths: M libnozzle/tests/test-common.c Log Message: ----------- nozzle: don´t leak tun/tap interfaces in test suite the need_tun() test check to verify that the kernel module for tun/tap is loaded, was opening a generic /dev/tun (or /dev/tap) to verify the presence of the kernel module. On linux, closing the fd to the tap/tun device is enough to destroy the device. On BSD the device is set to DOWN on closing the fd, but it´s not destroyed. Stop leaking by gathering ifr ioctl info from the generic interface created by BSD and pass it to the ioctlfd to destroy. Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Commit: fa63b127bac3c6169407dd0d4d15ba2f0d503ba5 https://github.com/kronosnet/kronosnet/commit/fa63b127bac3c6169407dd0d4d15b… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2023-09-25 (Mon, 25 Sep 2023) Changed paths: M libknet/links.c M libknet/tests/api_knet_link_set_ping_timers.c Log Message: ----------- links: fix ping interval and pong timeout value checking warn if ping interval is lower than thread timer resolution as it has no effects error if ping timeout is lower than thread timer resolution as it causes links to be highly unstable Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Commit: cb96e3aa85799b6b2c74a645af6cc7e494f7f811 https://github.com/kronosnet/kronosnet/commit/cb96e3aa85799b6b2c74a645af6cc… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2023-09-25 (Mon, 25 Sep 2023) Changed paths: M libknet/threads_rx.c Log Message: ----------- rx: allow links to be active faster scenario: node A and node B node A completes ping/pong link up process faster than B node A starts to send data to node B old behavior: node B would unconditionally discard data packets new behavior: node B will check internal link status to see if ping/pong link up process is in progress. if the link is sending pings and receiving pongs, it´s safe to assume that the link will go up (since we are also receiving data from the node A). node B will speed up link up and accept data immediately. This should address a overall init race condition when nodes startup are slighly off by enough milliseconds to cause 2 memeberships to form and see fencing fireworks. Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Commit: f5d6e66a950d103559212f33759b245ca59e7805 https://github.com/kronosnet/kronosnet/commit/f5d6e66a950d103559212f33759b2… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2023-09-26 (Tue, 26 Sep 2023) Changed paths: M libknet/crypto.c M libknet/links.c M libknet/tests/api_knet_link_set_ping_timers.c M libknet/threads_rx.c M libnozzle/tests/test-common.c Log Message: ----------- Merge pull request #413 from kronosnet/stable1-proposed stable1 proposed Compare: https://github.com/kronosnet/kronosnet/compare/a40c3549012f...f5d6e66a950d