diff options
| author | Martin Willi <martin@revosec.ch> | 2013-09-18 13:56:45 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2013-09-30 13:51:11 +0200 |
| commit | ee99f37eccb08474b53eebb81761c038bf46c458 (patch) | |
| tree | 35a14ed7efca0fd923ec164c5fa3e94226128ffa /src/libcharon/plugins/kernel_libipsec | |
| parent | e4b7b48c1ec0b1e78db995892d73a64240e87010 (diff) | |
| download | strongswan-ee99f37eccb08474b53eebb81761c038bf46c458.tar.bz2 strongswan-ee99f37eccb08474b53eebb81761c038bf46c458.tar.xz | |
ikev1: Delay a potential delete for a duplicate IKE_SA having a replace policy
Sending a DELETE for the replaced SA immediately is problematic during
reauthentication, as the peer might have associated the Quick Modes to the
old SA, and also delete them.
With this change the delete for the old ISAKMP SA is usually omitted, as it
is gets implicitly deleted by the reauth.
Diffstat (limited to 'src/libcharon/plugins/kernel_libipsec')
0 files changed, 0 insertions, 0 deletions