ikev1: Only delete redundant CHILD_SAs if configured
[strongswan.git] / src / libcharon / sa / ikev1 / task_manager_v1.c
index 48ec3e7..3472d2c 100644 (file)
@@ -1805,8 +1805,12 @@ METHOD(task_manager_t, queue_child_rekey, void,
                if (is_redundant(this, child_sa))
                {
                        child_sa->set_state(child_sa, CHILD_REKEYED);
-                       queue_task(this, (task_t*)quick_delete_create(this->ike_sa,
+                       if (lib->settings->get_bool(lib->settings, "%s.delete_rekeyed",
+                                                                               FALSE, lib->ns))
+                       {
+                               queue_task(this, (task_t*)quick_delete_create(this->ike_sa,
                                                                                                protocol, spi, FALSE, FALSE));
+                       }
                }
                else
                {