]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
vici: Use a default child rekey time of 1 hour
authorMartin Willi <martin@revosec.ch>
Tue, 29 Apr 2014 09:18:42 +0000 (11:18 +0200)
committerMartin Willi <martin@revosec.ch>
Wed, 7 May 2014 12:13:38 +0000 (14:13 +0200)
src/libcharon/plugins/vici/vici_config.c

index d0b95b861cc4bf64d9051bba043a254a98e36c63..bf6f88f1b4b91c26f55c39b30d67470b94d9979c 100644 (file)
  */
 #define LFT_DEFAULT_IKE_REKEY (4 * 60 * 60)
 
+/**
+ * Default CHILD rekey time
+ */
+#define LFT_DEFAULT_CHILD_REKEY (1 * 60 * 60)
+
 typedef struct private_vici_config_t private_vici_config_t;
 
 /**
@@ -1278,6 +1283,7 @@ CALLBACK(children_sn, bool,
                .start_action = ACTION_NONE,
                .lft = {
                        .time = {
+                               .rekey = LFT_DEFAULT_CHILD_REKEY,
                                .life = LFT_UNDEFINED,
                                .jitter = LFT_UNDEFINED,
                        },