[strongSwan] Traffic selector modification ignored when rekeying SA

[Tobias Brunner]

Hi,

> So as of today, the only way to update traffic selector list for a given
> connexion with strongswan is to wait for the next reauthentication,
> meaning potential packet drops during the process.

If the remote end's config allows it, you can create a new CHILD_SA with
new TS and remove the old one.

Regard,
Tobias