denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ike-sa: Properly set timing info for delete after rekeying

Browse Source 
The job is queued properly, yet the timing information is wrong.

Signed-off-by: Stefan Berghofer <[email protected]>

Fixes: ee61471113 ("implemented RFC4478 (repeated authentication)...")
This commit is contained in:
Stefan Berghofer
2021-02-18 10:02:55 +01:00
committed by Tobias Brunner
parent d65d4eab73
commit f7613cb581
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ike_sa.c
+1 -1
View File
@@ -2984,7 +2984,7 @@ METHOD(ike_sa_t, inherit_post, void,
this->stats[STAT_REAUTH] = other->stats[STAT_REAUTH];
reauth = max(0, this->stats[STAT_REAUTH] - now);
delete = reauth + this->peer_cfg->get_over_time(this->peer_cfg);
this->stats[STAT_DELETE] = this->stats[STAT_REAUTH] + delete;
this->stats[STAT_DELETE] = now + delete;
DBG1(DBG_IKE, "rescheduling reauthentication in %ds after rekeying, "
"lifetime reduced to %ds", reauth, delete);
lib->scheduler->schedule_job(lib->scheduler,