ike: Ignore rekeyed and deleted CHILD_SAs when reestablishing IKE_SAs

2018-04-12 16:32:47 +02:00
parent a1620c16ec
commit a747ad738c
2 changed files with 27 additions and 0 deletions
@@ -1796,6 +1796,15 @@ static void trigger_mbb_reauth(private_task_manager_t *this)
 	{
 		child_create_t *child_create;

+		switch (child_sa->get_state(child_sa))
+		{
+			case CHILD_REKEYED:
+			case CHILD_DELETED:
+				/* ignore CHILD_SAs in these states */
+				continue;
+			default:
+				break;
+		}
 		cfg = child_sa->get_config(child_sa);
 		child_create = child_create_create(new, cfg->get_ref(cfg),
 										   FALSE, NULL, NULL);