From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 7 Aug 2017 08:46:45 +0000 (+0200)
Subject: Merge commit 'child-sa-rekey-tkm'
X-Git-Tag: 5.6.0rc1~17
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=11ddda2ecdc372707485bd847a322288d1bea858;p=thirdparty%2Fstrongswan.git

Merge commit 'child-sa-rekey-tkm'

This fixes CHILD_SA rekeying with TKM and changes how we switch to the
outbound IPsec SA with Netlink/XFRM (using SPIs on the outbound policy
instead of installing the outbound SA delayed).

For charon-tkm it changes when esa_select() and esa_reset() are called,
now with the outbound policy and the inbound SA, respectively, instead
of the outbound SA in both cases.

Also fixed is a potential traffic loss when a rekey collision is lost.
---

11ddda2ecdc372707485bd847a322288d1bea858