From 660e06b048f76335dfe76501ec9e6d49c71691e8 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 25 Feb 2025 12:14:12 +0100 Subject: [PATCH] ike-sa: Fix check for make-before-break when handling DELETE failure Fixes: a5e80cf5e451 ("libcharon: Enable make_before_break option by default") --- src/libcharon/sa/ike_sa.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libcharon/sa/ike_sa.c b/src/libcharon/sa/ike_sa.c index 4a88e7ee5..a14e9ab3b 100644 --- a/src/libcharon/sa/ike_sa.c +++ b/src/libcharon/sa/ike_sa.c @@ -2534,7 +2534,7 @@ METHOD(ike_sa_t, retransmit, status_t, DBG1(DBG_IKE, "proper IKE_SA delete failed, peer not responding"); if (has_condition(this, COND_REAUTHENTICATING) && !lib->settings->get_bool(lib->settings, - "%s.make_before_break", FALSE, lib->ns)) + "%s.make_before_break", TRUE, lib->ns)) { DBG1(DBG_IKE, "delete during reauthentication failed, " "trying to reestablish IKE_SA anyway");