From 8891ed5478723a34e9a33151b77b563055b99684 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Fri, 21 Nov 2014 12:10:16 +0100 Subject: [PATCH] ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekey --- src/libcharon/sa/ikev2/tasks/ike_rekey.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/libcharon/sa/ikev2/tasks/ike_rekey.c b/src/libcharon/sa/ikev2/tasks/ike_rekey.c index 444ac6ade..fdab03801 100644 --- a/src/libcharon/sa/ikev2/tasks/ike_rekey.c +++ b/src/libcharon/sa/ikev2/tasks/ike_rekey.c @@ -163,6 +163,7 @@ METHOD(task_t, process_r, status_t, { case CHILD_CREATED: case CHILD_REKEYING: + case CHILD_RETRYING; case CHILD_DELETING: /* we do not allow rekeying while we have children in-progress */ DBG1(DBG_IKE, "peer initiated rekeying, but a child is half-open");