[strongSwan] Question on using libcharon

[Noam Lampert]

I have code that uses libcharon directly. It basically adds an ike_cfg,
peer_cfg, and then calls charon->start().

When peering two instances of this code with each other, I have a race
where one instance believes that it has a valid outgoing child_sa, and the
other does not yet recognize this SPI.
I believe the reason for this race is that both sides have initiator=false,
and are installing the child-sa from build_r() - whereas the intention was
that one side would have initiator=true and install the SA only in
process_r().

Does all this make sense?
Do you see this as a bug?
Is there a suggested workaround?

Thanks,

Noam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140319/d29d9c8a/attachment.html>