From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 20 Dec 2021 15:10:19 +0000 (+0100)
Subject: child-rekey: Maintain security label during rekeying
X-Git-Tag: 5.9.6rc1~3^2~12
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=92f54e55e98a3adb52ef556e84e033c831ce70ac;p=thirdparty%2Fstrongswan.git

child-rekey: Maintain security label during rekeying
---

diff --git a/src/libcharon/sa/ikev2/tasks/child_rekey.c b/src/libcharon/sa/ikev2/tasks/child_rekey.c
index cf103e1941..29ae6de676 100644
--- a/src/libcharon/sa/ikev2/tasks/child_rekey.c
+++ b/src/libcharon/sa/ikev2/tasks/child_rekey.c
@@ -210,6 +210,8 @@ METHOD(task_t, build_i, status_t,
 	this->child_create->use_if_ids(this->child_create,
 						this->child_sa->get_if_id(this->child_sa, TRUE),
 						this->child_sa->get_if_id(this->child_sa, FALSE));
+	this->child_create->use_label(this->child_create,
+						this->child_sa->get_label(this->child_sa));
 
 	if (this->child_create->task.build(&this->child_create->task,
 									   message) != NEED_MORE)
@@ -272,6 +274,8 @@ METHOD(task_t, build_r, status_t,
 	this->child_create->use_if_ids(this->child_create,
 						this->child_sa->get_if_id(this->child_sa, TRUE),
 						this->child_sa->get_if_id(this->child_sa, FALSE));
+	this->child_create->use_label(this->child_create,
+						this->child_sa->get_label(this->child_sa));
 	config = this->child_sa->get_config(this->child_sa);
 	this->child_create->set_config(this->child_create, config->get_ref(config));
 	this->child_create->task.build(&this->child_create->task, message);