child-sa: Don't try to update outbound SA if it is not installed anymore

diff --git a/src/libcharon/sa/child_sa.c b/src/libcharon/sa/child_sa.c
index 3523d4820a6fb7e56f998adc7672fdfa4e63908b..b7833109a3da6c062c99334526a194153f726734 100644 (file)
--- a/src/libcharon/sa/child_sa.c
+++ b/src/libcharon/sa/child_sa.c
@@ -1463,7 +1463,7 @@ static status_t update_sas(private_child_sa_t *this, host_t *me, host_t *other,
        }
 
        /* update his (responder) SA */
-       if (this->other_spi)
+       if (this->other_spi && (this->outbound_state & CHILD_OUTBOUND_SA))
        {
                kernel_ipsec_sa_id_t id = {
                        .src = this->my_addr,