From e095d87bb69b9192350489a9f57b4047880f422f Mon Sep 17 00:00:00 2001 From: Thomas Egerer Date: Fri, 24 Apr 2015 13:43:14 +0200 Subject: [PATCH] jobs: Don't execute rekey CHILD_SA job on passive IKE_SAs Signed-off-by: Thomas Egerer --- src/libcharon/processing/jobs/rekey_child_sa_job.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/libcharon/processing/jobs/rekey_child_sa_job.c b/src/libcharon/processing/jobs/rekey_child_sa_job.c index 8f17d39ab..057876b33 100644 --- a/src/libcharon/processing/jobs/rekey_child_sa_job.c +++ b/src/libcharon/processing/jobs/rekey_child_sa_job.c @@ -67,7 +67,10 @@ METHOD(job_t, execute, job_requeue_t, } else { - ike_sa->rekey_child_sa(ike_sa, this->protocol, this->spi); + if (ike_sa->get_state(ike_sa) != IKE_PASSIVE) + { + ike_sa->rekey_child_sa(ike_sa, this->protocol, this->spi); + } charon->ike_sa_manager->checkin(charon->ike_sa_manager, ike_sa); } return JOB_REQUEUE_NONE;