ike-init: Remove redundant check for more key exchanges during rekeying

We only call derive_keys() after a successful key_exchange_done() call
during rekeying, so this will always return FALSE.
This commit is contained in:
Tobias Brunner
2026-04-02 08:17:05 +02:00
parent 05807b1b1b
commit 66fffdb1bf
-4
View File
@@ -1004,10 +1004,6 @@ static bool derive_keys_internal(private_ike_init_t *this, chunk_t nonce_i,
if (this->old_sa)
{
if (additional_key_exchange_required(this))
{ /* when rekeying, we only derive keys once all exchanges are done */
return FALSE;
}
old_sa = this->old_sa;
kes = this->kes;
}