child-delete: Reply as usual when concurrently rekeying the IKE_SA
As per RFC 7296, 2.25.2 (what we did before was the behavior described in RFC 4718).
This commit is contained in:
@@ -382,11 +382,7 @@ METHOD(task_t, process_r, status_t,
|
|||||||
METHOD(task_t, build_r, status_t,
|
METHOD(task_t, build_r, status_t,
|
||||||
private_child_delete_t *this, message_t *message)
|
private_child_delete_t *this, message_t *message)
|
||||||
{
|
{
|
||||||
/* if we are rekeying, we send an empty informational */
|
build_payloads(this, message);
|
||||||
if (this->ike_sa->get_state(this->ike_sa) != IKE_REKEYING)
|
|
||||||
{
|
|
||||||
build_payloads(this, message);
|
|
||||||
}
|
|
||||||
DBG1(DBG_IKE, "CHILD_SA closed");
|
DBG1(DBG_IKE, "CHILD_SA closed");
|
||||||
return destroy_and_reestablish(this);
|
return destroy_and_reestablish(this);
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user