diff options
| author | Martin Willi <martin@revosec.ch> | 2015-03-11 14:41:37 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2015-03-11 14:48:08 +0100 |
| commit | 799f4c5db942b6a1cc92e0f6cc0f01f591695309 (patch) | |
| tree | 98a4afa20755bbfd7a8c2603bd746baba6943a83 /src/libcharon/plugins/kernel_iph/kernel_iph_plugin.c | |
| parent | 438318c6c3b15db75bf5e18294edf9375a1a97f2 (diff) | |
| download | strongswan-799f4c5db942b6a1cc92e0f6cc0f01f591695309.tar.bz2 strongswan-799f4c5db942b6a1cc92e0f6cc0f01f591695309.tar.xz | |
ikev2: Don't set old IKE_SA to REKEYING state during make-before-break reauth
We are actually not in rekeying state, but just trigger a separate, new IKE_SA
as a replacement for the current IKE_SA. Switching to the REKEYING state
disables the invocation of both IKE and CHILD_SA updown hooks as initiator,
preventing the removal of any firewall rules.
Fixes #885.
Diffstat (limited to 'src/libcharon/plugins/kernel_iph/kernel_iph_plugin.c')
0 files changed, 0 insertions, 0 deletions