diff options
| author | Martin Willi <martin@revosec.ch> | 2013-07-24 16:20:46 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2013-07-29 08:56:09 +0200 |
| commit | 7612a6e42fa4779adbeab74ec044bd554d00c3b3 (patch) | |
| tree | 71219d19f3d698b3123ce8e285255f70bd28c2f9 /src/libcharon/plugins/eap_radius/eap_radius.c | |
| parent | c5d2d867f120926c3946faa583c86c6cce15f895 (diff) | |
| download | strongswan-7612a6e42fa4779adbeab74ec044bd554d00c3b3.tar.bz2 strongswan-7612a6e42fa4779adbeab74ec044bd554d00c3b3.tar.xz | |
mem-pool: add option for reusing online leases, and disable it by default
Mainly for reauthentication with third party implementations, we allowed to
reuse an online lease, but only for the same peer identity and when it
explicitly requested the same address.
This has always been problematic, because it changes the reqid of the CHILD_SA
with the same traffic selectors, breaking the old tunnel. As we now reject
such policy overwrites, this usually lets the installation of the new policies
fail. We therefore disable reassignment of online leases by default.
Diffstat (limited to 'src/libcharon/plugins/eap_radius/eap_radius.c')
0 files changed, 0 insertions, 0 deletions