Support for closing CHILD/IKE_SA if a CHILD_SA is inactive.

2010-01-12 10:23:42 +01:00
parent bc6ff2fc99
commit aa9eeb5deb
5 changed files with 234 additions and 0 deletions
@@ -12,6 +12,11 @@ strongswan-4.3.6

 - The IKEv1 and IKEV2 daemons now check certificate path length constraints.

+- The new strongswan.conf option "charon.inactivity_timeout" closes a CHILD_SA
+  if no traffic was sent or received within the given interval. To close the
+  complete IKE_SA if its only CHILD_SA was inactive, set
+  "charon.inactivity_close_ike" to yes.
+
 - More detailed IKEv2 EAP payload information in debug output

 - IKEv2 EAP-SIM and EAP-AKA share joint libsimaka library