Destroy existing IKE_SAs with same identities when receiving INITIAL_CONTACT

2011-01-05 16:46:08 +01:00
parent a4a1e24d37
commit 6f5892f5c7
3 changed files with 33 additions and 4 deletions
@@ -106,10 +106,12 @@ struct ike_sa_manager_t {
 	 * deadlocks occur otherwise.
 	 *
 	 * @param ike_sa			ike_sa to check
+	 * @param force_replace		replace existing SAs, regardless of unique policy
 	 * @return					TRUE, if the given IKE_SA has duplicates and
 	 * 							should be deleted
 	 */
-	bool (*check_uniqueness)(ike_sa_manager_t *this, ike_sa_t *ike_sa);
+	bool (*check_uniqueness)(ike_sa_manager_t *this, ike_sa_t *ike_sa,
+							 bool force_replace);

 	/**
 	 * Check if we already have a connected IKE_SA between two identities.