denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekey

Browse Source
This commit is contained in:
Martin Willi
2014-11-21 12:51:20 +01:00
parent c39b0c883d
commit 8891ed5478
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev2/tasks/ike_rekey.c
+1
View File
@@ -163,6 +163,7 @@ METHOD(task_t, process_r, status_t,
{ {
case CHILD_CREATED: case CHILD_CREATED:
case CHILD_REKEYING: case CHILD_REKEYING:
case CHILD_RETRYING;
case CHILD_DELETING: case CHILD_DELETING:
/* we do not allow rekeying while we have children in-progress */ /* we do not allow rekeying while we have children in-progress */
DBG1(DBG_IKE, "peer initiated rekeying, but a child is half-open"); DBG1(DBG_IKE, "peer initiated rekeying, but a child is half-open");