]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
android: Disable make-before-break reauthentication
authorTobias Brunner <tobias@strongswan.org>
Tue, 25 Feb 2025 11:15:20 +0000 (12:15 +0100)
committerTobias Brunner <tobias@strongswan.org>
Tue, 25 Feb 2025 13:57:00 +0000 (14:57 +0100)
The service implementation with its handling of reauth callbacks and
no-DNS TUN device etc. can't handle make-before-break reauthentication
at the moment.

src/frontends/android/app/src/main/jni/libandroidbridge/charonservice.c

index 12ac0172781b21941c03c42800836a0ac0e9d0cb..bec15a3218ca93cac8168f657fde09b56bf6298b 100644 (file)
@@ -504,6 +504,11 @@ static void set_options(char *logfile, jboolean ipv6)
                                        "charon.retransmit_base", ANDROID_RETRANSMIT_BASE);
        lib->settings->set_bool(lib->settings,
                                        "charon.initiator_only", TRUE);
+       /* the service currently can't handle make-before-break reauth and assumes
+        * the old SA is deleted before the replacement and intalls a special
+        * replacement TUN device in-between */
+       lib->settings->set_bool(lib->settings,
+                                       "charon.make_before_break", FALSE);
        lib->settings->set_bool(lib->settings,
                                        "charon.close_ike_on_child_failure", TRUE);
        lib->settings->set_bool(lib->settings,