ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekey

diff --git a/src/libcharon/sa/ikev2/tasks/ike_rekey.c b/src/libcharon/sa/ikev2/tasks/ike_rekey.c
index 444ac6ade1a7670f5b56ebc0c68f0047491d4743..fdab03801a0fb03875c5f2b7cbb7779e197662d2 100644 (file)
--- a/src/libcharon/sa/ikev2/tasks/ike_rekey.c
+++ b/src/libcharon/sa/ikev2/tasks/ike_rekey.c
@@ -163,6 +163,7 @@ METHOD(task_t, process_r, status_t,
                {
                        case CHILD_CREATED:
                        case CHILD_REKEYING:
+                       case CHILD_RETRYING;
                        case CHILD_DELETING:
                                /* we do not allow rekeying while we have children in-progress */
                                DBG1(DBG_IKE, "peer initiated rekeying, but a child is half-open");