From 40a37b6ffc2c9f6f5bfa231d584d56363f2d6adb Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 25 Feb 2025 12:15:20 +0100 Subject: [PATCH] android: Disable make-before-break reauthentication The service implementation with its handling of reauth callbacks and no-DNS TUN device etc. can't handle make-before-break reauthentication at the moment. --- .../app/src/main/jni/libandroidbridge/charonservice.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/frontends/android/app/src/main/jni/libandroidbridge/charonservice.c b/src/frontends/android/app/src/main/jni/libandroidbridge/charonservice.c index 12ac01727..bec15a321 100644 --- a/src/frontends/android/app/src/main/jni/libandroidbridge/charonservice.c +++ b/src/frontends/android/app/src/main/jni/libandroidbridge/charonservice.c @@ -504,6 +504,11 @@ static void set_options(char *logfile, jboolean ipv6) "charon.retransmit_base", ANDROID_RETRANSMIT_BASE); lib->settings->set_bool(lib->settings, "charon.initiator_only", TRUE); + /* the service currently can't handle make-before-break reauth and assumes + * the old SA is deleted before the replacement and intalls a special + * replacement TUN device in-between */ + lib->settings->set_bool(lib->settings, + "charon.make_before_break", FALSE); lib->settings->set_bool(lib->settings, "charon.close_ike_on_child_failure", TRUE); lib->settings->set_bool(lib->settings,