diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2015-05-12 16:59:20 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2015-05-21 16:00:39 +0200 |
| commit | 4112ebad4a4f2e247896dcb3ed2416b69df95051 (patch) | |
| tree | 6e14a99c583160d0b89be03edda699fff96a25c5 /src/libcharon/plugins/vici/python | |
| parent | b29c5c0f217b0313d3fd935328c54863cbd59fad (diff) | |
| download | strongswan-4112ebad4a4f2e247896dcb3ed2416b69df95051.tar.bz2 strongswan-4112ebad4a4f2e247896dcb3ed2416b69df95051.tar.xz | |
ikev1: When a reauth is detected explicitly delete the old IKE_SA
Instead of just implicitly destroying the old SA we properly delete it to
notify the other peer (if the other peer keeps the SA up after the
reauthentication and sends DPDs it might consider us dead even though the
new SA is up, that seems to be the case with racoon). We delay the DELETE
a bit to give the other peer time to get the new SA fully established.
Since DELETE messages are not retransmitted it is still possible that
the other peer misses that we deleted the SA.
Diffstat (limited to 'src/libcharon/plugins/vici/python')
0 files changed, 0 insertions, 0 deletions