ike-init: Remove redundant check for more key exchanges during rekeying
We only call derive_keys() after a successful key_exchange_done() call during rekeying, so this will always return FALSE.
This commit is contained in:
@@ -1004,10 +1004,6 @@ static bool derive_keys_internal(private_ike_init_t *this, chunk_t nonce_i,
|
||||
|
||||
if (this->old_sa)
|
||||
{
|
||||
if (additional_key_exchange_required(this))
|
||||
{ /* when rekeying, we only derive keys once all exchanges are done */
|
||||
return FALSE;
|
||||
}
|
||||
old_sa = this->old_sa;
|
||||
kes = this->kes;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user