denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libcharon: Enable make_before_break option by default

Browse Source
This commit is contained in:
Andreas Steffen
2024-11-22 14:18:39 +01:00
committed by Tobias Brunner
parent e69e7c86e7
commit a5e80cf5e4
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/options/charon.opt
+1 -1
View File
@@ -291,7 +291,7 @@ charon.max_ikev1_exchanges = 3
charon.max_packet = 10000 charon.max_packet = 10000
Maximum packet size accepted by charon. Maximum packet size accepted by charon.
charon.make_before_break = no charon.make_before_break = yes
Initiate IKEv2 reauthentication with a make-before-break scheme. Initiate IKEv2 reauthentication with a make-before-break scheme.
Initiate IKEv2 reauthentication with a make-before-break instead of a Initiate IKEv2 reauthentication with a make-before-break instead of a
src/libcharon/sa/ikev2/task_manager_v2.c
+3 -2
View File
@@ -1,7 +1,8 @@
/* /*
* Copyright (C) 2007-2019 Tobias Brunner * Copyright (C) 2007-2019 Tobias Brunner
* Copyright (C) 2007-2010 Martin Willi * Copyright (C) 2007-2010 Martin Willi
* * Copyright (C) 2023 Andreas Steffen, strongSec GmbH
* Copyright (C) secunet Security Networks AG * Copyright (C) secunet Security Networks AG
* *
* This program is free software; you can redistribute it and/or modify it * This program is free software; you can redistribute it and/or modify it
@@ -2618,7 +2619,7 @@ task_manager_v2_t *task_manager_v2_create(ike_sa_t *ike_sa)
.active_tasks = array_create(0, 0), .active_tasks = array_create(0, 0),
.passive_tasks = array_create(0, 0), .passive_tasks = array_create(0, 0),
.make_before_break = lib->settings->get_bool(lib->settings, .make_before_break = lib->settings->get_bool(lib->settings,
"%s.make_before_break", FALSE, lib->ns), "%s.make_before_break", TRUE, lib->ns),
); );
retransmission_parse_default(&this->retransmit); retransmission_parse_default(&this->retransmit);