denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

child-sa: Add a new state to track rekeyed IKEv1 CHILD_SAs

Browse Source 
This is needed to handle DELETEs properly, which was previously done via
CHILD_REKEYING, which we don't use anymore since 5c6a62ceb6 as it prevents
reauthentication.
This commit is contained in:
Tobias Brunner
2015-03-25 12:00:20 +01:00
parent 66147ef670
commit 70728eb1b6
7 changed files with 15 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/stroke/stroke_list.c
+2 -1
View File
@@ -323,7 +323,8 @@ static void log_child_sa(FILE *out, child_sa_t *child_sa, bool all)
}
}
else if (child_sa->get_state(child_sa) == CHILD_REKEYING)
else if (child_sa->get_state(child_sa) == CHILD_REKEYING ||
child_sa->get_state(child_sa) == CHILD_REKEYED)
{
rekey = child_sa->get_lifetime(child_sa, TRUE);
fprintf(out, ", expires in %V", &now, &rekey);