diff --git a/src/libcharon/sa/ikev1/tasks/quick_mode.c b/src/libcharon/sa/ikev1/tasks/quick_mode.c index 5e4bf8620..22bead945 100644 --- a/src/libcharon/sa/ikev1/tasks/quick_mode.c +++ b/src/libcharon/sa/ikev1/tasks/quick_mode.c @@ -411,6 +411,8 @@ static bool install(private_quick_mode_t *this) /* rekeyed CHILD_SAs stay installed until they expire or are deleted * by the other peer */ old->set_state(old, CHILD_REKEYED); + /* but remove outbound SA as we don't want to use it actively */ + old->remove_outbound(old); /* as initiator we delete the CHILD_SA if configured to do so */ if (this->initiator && this->delete) {