diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2016-06-10 16:00:25 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2016-06-17 18:48:08 +0200 |
| commit | 15cea08adc6a2700c401a23ce1838d33f31e26f5 (patch) | |
| tree | 7518844565fe78a727d32c8b7263650a5d3c0a51 /src/libcharon/tests/utils/mock_ipsec.c | |
| parent | de4e4687ff8357c30483c5cba39c7cc2a24bbb6c (diff) | |
| download | strongswan-15cea08adc6a2700c401a23ce1838d33f31e26f5.tar.bz2 strongswan-15cea08adc6a2700c401a23ce1838d33f31e26f5.tar.xz | |
child-rekey: Only rekey installed CHILD_SAs
Depending on the lifetimes a CHILD_SA we rekeyed as responder might
expire shortly afterwards. We don't want to rekey it again.
When retrying due to an INVALID_KE_PAYLOAD notify the expected state
is CHILD_REKEYING if it is anything else (e.g. due to a collision) we
ignore it.
We also abort the exchange properly if we don't find the CHILD_SA, no
need for an empty INFORMATIONAL exchange anymore.
Diffstat (limited to 'src/libcharon/tests/utils/mock_ipsec.c')
0 files changed, 0 insertions, 0 deletions