From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 4 Sep 2017 16:11:39 +0000 (+0200)
Subject: child-delete: Only let SAs expire naturally if they not already did
X-Git-Tag: 5.6.1dr3~24
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=da479ae2c9e4176e005b79e70e1bb2d9c9eda88a;p=thirdparty%2Fstrongswan.git

child-delete: Only let SAs expire naturally if they not already did
---

diff --git a/src/libcharon/sa/ikev2/tasks/child_delete.c b/src/libcharon/sa/ikev2/tasks/child_delete.c
index 2217295b6e..164f8fc031 100644
--- a/src/libcharon/sa/ikev2/tasks/child_delete.c
+++ b/src/libcharon/sa/ikev2/tasks/child_delete.c
@@ -349,7 +349,7 @@ static status_t destroy_and_reestablish(private_child_delete_t *this)
 									child_sa->get_unique_id(child_sa)), delay);
 				continue;
 			}
-			else if (expire)
+			else if (now < expire)
 			{	/* let it expire naturally */
 				continue;
 			}