ikev1: Mark rekeyed CHILD_SAs as INSTALLED
Since we keep them around until they finally expire they otherwise would block IKE_SA rekeying/reauthentication.
This commit is contained in:
@@ -401,6 +401,8 @@ static bool install(private_quick_mode_t *this)
|
|||||||
if (old)
|
if (old)
|
||||||
{
|
{
|
||||||
charon->bus->child_rekey(charon->bus, old, this->child_sa);
|
charon->bus->child_rekey(charon->bus, old, this->child_sa);
|
||||||
|
/* rekeyed CHILD_SAs stay installed until they expire */
|
||||||
|
old->set_state(old, CHILD_INSTALLED);
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user