[strongSwan-dev] HA : config loading and resyncing

Emeric POUPON emeric.poupon at stormshield.eu
Fri Mar 6 18:03:31 CET 2015


I have another problem with the HA plugin.
I have a very large ipsec.conf file. When the HA plugin is initializing it requests a resynchronization, 1 second later:

        if (sync)
                /* request a resync as soon as we are up */
                lib->scheduler->schedule_job(lib->scheduler, (job_t*)
                                                                        this, NULL, NULL, JOB_PRIO_CRITICAL), 1);

The problem is that some HA messages are received while the configuration is not completely loaded yet.
=> the associated IKE_SA/CHILD_SA are dropped.

It looks like we would need a new kind of event to tell charon's ha plugin it can start?

What do you think?

Best Regards,


More information about the Dev mailing list