[strongSwan-dev] [PATCH] Don't take reqid from rekeyed CHILD_SAs

Jan Blunck jblunck at infradead.org
Wed Apr 20 12:55:15 CEST 2016


If we take the reqid from an old (already rekeyed) CHILD_SA this switches
its back into CHILD_REKEYING state. Instead lets use the reqid from the
most recent installed or rekeying CHILD_SA.
---
 src/libcharon/sa/ikev1/tasks/quick_mode.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/libcharon/sa/ikev1/tasks/quick_mode.c b/src/libcharon/sa/ikev1/tasks/quick_mode.c
index b2e6681..97cdd26 100644
--- a/src/libcharon/sa/ikev1/tasks/quick_mode.c
+++ b/src/libcharon/sa/ikev1/tasks/quick_mode.c
@@ -1007,7 +1007,6 @@ static void check_for_rekeyed_child(private_quick_mode_t *this)
 			{
 				case CHILD_INSTALLED:
 				case CHILD_REKEYING:
-				case CHILD_REKEYED:
 					policies = child_sa->create_policy_enumerator(child_sa);
 					if (policies->enumerate(policies, &local, &remote) &&
 						local->equals(local, this->tsr) &&
-- 
2.5.5



More information about the Dev mailing list