child-delete: Only let SAs expire naturally if they not already did

diff --git a/src/libcharon/sa/ikev2/tasks/child_delete.c b/src/libcharon/sa/ikev2/tasks/child_delete.c
index 2217295b6eca53caddeafcb56e522e090134966f..164f8fc031b263c5630aaedc7cdf9288edbf487a 100644 (file)
--- a/src/libcharon/sa/ikev2/tasks/child_delete.c
+++ b/src/libcharon/sa/ikev2/tasks/child_delete.c
@@ -349,7 +349,7 @@ static status_t destroy_and_reestablish(private_child_delete_t *this)
                                                                        child_sa->get_unique_id(child_sa)), delay);
                                continue;
                        }
-                       else if (expire)
+                       else if (now < expire)
                        {       /* let it expire naturally */
                                continue;
                        }