charon-tkm: Call esa_reset() when the inbound SA is deleted

After a rekeying the outbound SA and policy is deleted immediately, however, the inbound SA is not removed until a few seconds later, so delayed packets can still be processed. This adds a flag to get_esa_id() that specifies the location of the given SPI.
2017-08-07 10:46:00 +02:00
parent dbaeaaf605
commit 772957778c
10 changed files with 59 additions and 23 deletions
@@ -5,7 +5,7 @@ config setup
 conn %default
 	ikelifetime=60m
 	keylife=10s
-	rekeymargin=8s
+	rekeymargin=6s
 	rekeyfuzz=0%
 	keyingtries=1
 	keyexchange=ikev2