]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
ike-sa: Fix check for make-before-break when handling DELETE failure
authorTobias Brunner <tobias@strongswan.org>
Tue, 25 Feb 2025 11:14:12 +0000 (12:14 +0100)
committerTobias Brunner <tobias@strongswan.org>
Fri, 28 Feb 2025 15:27:10 +0000 (16:27 +0100)
Fixes: a5e80cf5e451 ("libcharon: Enable make_before_break option by default")
src/libcharon/sa/ike_sa.c

index 4a88e7ee55cb6643c8f666cd490c641fb1016221..a14e9ab3b45f8b92ad19b4643dee8116baa7716e 100644 (file)
@@ -2534,7 +2534,7 @@ METHOD(ike_sa_t, retransmit, status_t,
                        DBG1(DBG_IKE, "proper IKE_SA delete failed, peer not responding");
                        if (has_condition(this, COND_REAUTHENTICATING) &&
                                !lib->settings->get_bool(lib->settings,
-                                                                       "%s.make_before_break", FALSE, lib->ns))
+                                                                       "%s.make_before_break", TRUE, lib->ns))
                        {
                                DBG1(DBG_IKE, "delete during reauthentication failed, "
                                         "trying to reestablish IKE_SA anyway");