Tobias Brunner dc8b479eb8 ike-init: Fix key derivation if SA is reset after IKE_INTERMEDIATE retransmits ...

Because the `derived` flag was not reset (it's set after the initial
IKE_SA_INIT exchange), no keys would get derived when sending
IKE_INTERMEDIATE during the next try.  As there is then no `aead_t`
available, encrypting the message would fail and the initiation would
remain stuck.

Fixes: 0d49ddec2e ("ike-init: Add support for multiple key exchanges")

2026-05-22 14:33:28 +02:00

..

attributes

mem-pool: Fix issue with make-before-break reauth and multiple IKE_SAs

2024-10-25 14:52:46 +02:00

bus

bus: Prevent redundant down event on rekeyed CHILD_SA delete timeout

2026-02-12 11:45:05 +01:00

config

child-cfg: Add flag to enable ICMP forwarding

2026-02-12 14:23:44 +01:00

control

controller: Migrate tracked IKE SA in case of redirect during IKE_AUTH

2025-08-22 15:26:59 +02:00

encoding

encrypted-payload: Check for non-zero payload size

2026-04-13 15:12:55 +02:00

kernel

Fixed some typos, courtesy of codespell

2026-03-02 16:30:12 +01:00

network

receiver: Avoid unaligned memory access in COOKIE verification

2026-05-19 17:27:33 +02:00

plugins

dhcp: Fix potential OOB read when parsing DHCP messages

2026-05-19 17:27:33 +02:00

processing/jobs

ike: Use correct format string for unique Child SA identifiers

2026-04-16 15:32:54 +02:00

sa

ike-init: Fix key derivation if SA is reset after IKE_INTERMEDIATE retransmits

2026-05-22 14:33:28 +02:00

tests

bus: Prevent redundant down event on rekeyed CHILD_SA delete timeout

2026-02-12 11:45:05 +01:00

Android.mk

kernel-listener: Add helpers to clone/destroy acquire data

2025-05-28 10:11:53 +02:00

daemon.c

daemon: Add facility to register custom init/deinit functions

2025-04-10 08:31:09 +02:00

daemon.h

daemon: Add facility to register custom init/deinit functions

2025-04-10 08:31:09 +02:00

debug

…

Makefile.am

kernel-listener: Add helpers to clone/destroy acquire data

2025-05-28 10:11:53 +02:00