]> git.ipfire.org Git - thirdparty/strongswan.git/commit
ike-rekey: Establish new IKE_SA earlier as responder, but only if no collision
authorTobias Brunner <tobias@strongswan.org>
Thu, 26 May 2016 13:08:09 +0000 (15:08 +0200)
committerTobias Brunner <tobias@strongswan.org>
Fri, 17 Jun 2016 16:48:04 +0000 (18:48 +0200)
commit851ee4eeb7c76de38d34fb34ccac77ae55806f2e
tree27791e6a2e9f2ad2cc83313dde0ec2080e71a929
parentb6a3c444e4a4600bd6ec48668e9b076597f87211
ike-rekey: Establish new IKE_SA earlier as responder, but only if no collision

Moving to the new SA only after receiving the DELETE for the old SA was
not ideal as it rendered the new SA unusable (because it simply didn't
exist in the manager) if the DELETE was delayed/got dropped.
src/libcharon/sa/ikev2/tasks/ike_rekey.c