[strongSwan-dev] HA : config loading and resyncing

Emeric POUPON emeric.poupon at stormshield.eu
Fri Mar 6 18:03:31 CET 2015


Hello,

I have another problem with the HA plugin.
I have a very large ipsec.conf file. When the HA plugin is initializing it requests a resynchronization, 1 second later:

src/libcharon/plugins/ha/ha_cache.c:
        if (sync)
        { 
                /* request a resync as soon as we are up */
                lib->scheduler->schedule_job(lib->scheduler, (job_t*)
                        callback_job_create_with_prio((callback_job_cb_t)request_resync,
                                                                        this, NULL, NULL, JOB_PRIO_CRITICAL), 1);
        } 

The problem is that some HA messages are received while the configuration is not completely loaded yet.
=> the associated IKE_SA/CHILD_SA are dropped.

It looks like we would need a new kind of event to tell charon's ha plugin it can start?

What do you think?

Best Regards,

Emeric


More information about the Dev mailing list