denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

android: Disable make-before-break reauthentication

Browse Source 
The service implementation with its handling of reauth callbacks and
no-DNS TUN device etc. can't handle make-before-break reauthentication
at the moment.
This commit is contained in:
Tobias Brunner
2025-02-25 14:57:00 +01:00
parent 9d4decbde8
commit 40a37b6ffc
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/frontends/android/app/src/main/jni/libandroidbridge/charonservice.c
+5
View File
@@ -504,6 +504,11 @@ static void set_options(char *logfile, jboolean ipv6)
"charon.retransmit_base", ANDROID_RETRANSMIT_BASE);
lib->settings->set_bool(lib->settings,
"charon.initiator_only", TRUE);
/* the service currently can't handle make-before-break reauth and assumes
* the old SA is deleted before the replacement and intalls a special
* replacement TUN device in-between */
lib->settings->set_bool(lib->settings,
"charon.make_before_break", FALSE);
lib->settings->set_bool(lib->settings,
"charon.close_ike_on_child_failure", TRUE);
lib->settings->set_bool(lib->settings,