<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Looking at the logs, it looks that all
CHILD_SA attached to the IKE_SA are rekeyed and removed with
Delete Payload, but the IKE_SA does not seems to be deleted with
Delete Payloads. On the other hand ipsec statusall does not shows
the old IKE_SA. <br>
<br>
If strongswan does not support an IKE_SA REKEY, I would like to
know if there are any reasons for that, or if it just not yet
implemented.<br>
<br>
BR, <br>
Daniel<br>
<br>
On 07/25/2013 07:40 PM, Daniel Palomares wrote:<br>
</div>
<blockquote
cite="mid:CAAa=VXNkyLQD=v2BbJSDXfW-wHzqeo5kCsqedVu074zJezJz6A@mail.gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<div dir="ltr">
<div>
<div>
<div>Hello all,<br>
<br>
</div>
I was just wondering to know if strongswan can perform rekey
for ONLY IKE_SAs and not IPsec SAs.<br>
<br>
</div>
Whether the response is yes or no: <br>
Does strongSwan keep the old IKE_SA keying material during
REKEY (for only IKE_SA or both IKE_SA and IPsec_SA) ?<br>
<br>
</div>
Thanks guys<br>
<div>
<div><br clear="all">
<div>
<div>
<div>
<div>
<div dir="ltr">Daniel<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Dev@lists.strongswan.org">Dev@lists.strongswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.strongswan.org/mailman/listinfo/dev">https://lists.strongswan.org/mailman/listinfo/dev</a></pre>
</blockquote>
<br>
</body>
</html>