ikev2: Trigger ike_reestablish_pre|post events for make-before-break reauth

Listeners can't track those IKE_SAs otherwise.  For break-before-make
reauthentications, these events are already triggered because that is
implemented by calling reestablish() on the old IKE_SA.
This commit is contained in:
Tobias Brunner
2025-02-28 16:27:10 +01:00
parent 660e06b048
commit 069a81e69a
2 changed files with 10 additions and 0 deletions
+3
View File
@@ -182,6 +182,9 @@ struct listener_t {
* peer_cfg (and the old hosts), but before resolving the hosts anew.
* It is not invoked on the responder.
*
* If this is called during a reauthentication, COND_REAUTHENTICATING is
* set on the old IKE_SA and the hosts are not resolved anew.
*
* @param old IKE_SA getting reestablished (is destroyed)
* @param new new IKE_SA replacing old (gets established)
* @return TRUE to stay registered, FALSE to unregister