mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-09 08:14:42 +00:00
Johnathan Corgan
537f0b32c7
Carries the in-process rekey continuity test and the retirement of the three rekey Docker suites onto the XX line. The continuity test was written against master's IK handshake, where the responder decided rekey-versus-fresh-dial from session age and the test had to backdate both sessions past a 30s acceptance gate. Here the responder classifies from the rekey marker the initiator declares in its msg3 negotiation TLV and reads no clock at all, so the backdating is dropped: it would age the session past nothing, and leaving it in would tell a reader a gate exists that does not. Checked that the test still discriminates rather than merely observing a session index change. Suppressing the declaration so the responder falls back to the cross-connection path reds the post-cutover assertion in 8 of 16 runs, which is the address-ordering coin flip the original data-plane drop had; the healthy tree is 0 of 16 red. The 30s backdate makes no difference to either rate, which is what confirms it was vestigial here. The suite wiring keeps mixed-profile, which master does not have, and drops the three rekey suites from the local suite list, the runner functions, the default flow, the --only dispatch and the GitHub matrix together, so check-ci-parity.sh stays green at 23 legs a side. The retirement note is retargeted at this branch's coverage: the establish decision tests live in src/proto/fmp/tests/core.rs and src/peer/machine.rs here, not in the establish_chartests.rs file master keeps.