ikev1: Mark rekeyed CHILD_SAs as INSTALLED
Since we keep them around until they finally expire they otherwise would block IKE_SA rekeying/reauthentication.
This commit is contained in:
1 parent
7d02f8dbf4
commit
5c6a62ceb6
1 file changed
+2
@@ -401,6 +401,8 @@ static bool install(private_quick_mode_t *this)
|
|||||||
if (old)
|
if (old)
|
||||||
{
|
{
|
||||||
charon->bus->child_rekey(charon->bus, old, this->child_sa);
|
charon->bus->child_rekey(charon->bus, old, this->child_sa);
|
||||||
|
/* rekeyed CHILD_SAs stay installed until they expire */
|
||||||
|
old->set_state(old, CHILD_INSTALLED);
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in new issue
Block a user