diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2017-03-01 18:02:38 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2017-05-23 18:46:06 +0200 |
| commit | dc3710e987b49c96ee2e81c1979fb2a6133bd30d (patch) | |
| tree | fcb2d8e9f4f5933b17299047deb08ec513fe0447 /src/libcharon/kernel/kernel_interface.c | |
| parent | f84757f2e6f253ed2ed6045fe53cce470acc3101 (diff) | |
| download | strongswan-dc3710e987b49c96ee2e81c1979fb2a6133bd30d.tar.bz2 strongswan-dc3710e987b49c96ee2e81c1979fb2a6133bd30d.tar.xz | |
ikev2: Delay installation of outbound SAs during rekeying on the responder
The responder has all the information needed to install both SAs before
the initiator does. So if the responder immediately installs the outbound
SA it might send packets using the new SA which the initiator is not yet
able to process. This can be avoided by delaying the installation of the
outbound SA until the replaced SA is deleted.
Diffstat (limited to 'src/libcharon/kernel/kernel_interface.c')
0 files changed, 0 insertions, 0 deletions