Tobias Brunner
772957778c
After a rekeying the outbound SA and policy is deleted immediately, however, the inbound SA is not removed until a few seconds later, so delayed packets can still be processed. This adds a flag to get_esa_id() that specifies the location of the given SPI.
11 lines
205 B
Plaintext
11 lines
205 B
Plaintext
# /etc/strongswan.conf - strongSwan configuration file
|
|
|
|
charon-tkm {
|
|
# remove rekeyed inbound SA a bit quicker for the test scenario
|
|
delete_rekeyed_delay = 2
|
|
dh_mapping {
|
|
15 = 1
|
|
16 = 2
|
|
}
|
|
}
|