projects / strongswan.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f0d051f) | patch
child-rekey: Don't install outbound SA in case of lost collisions
authorTobias Brunner <tobias@strongswan.org>
Fri, 4 Aug 2017 11:12:57 +0000 (13:12 +0200)
committerTobias Brunner <tobias@strongswan.org>
Mon, 7 Aug 2017 08:46:00 +0000 (10:46 +0200)
commit15e745cf4d1257df2b1cdf83961e0838b601ade5
treeb23a492ae9d2cb2d801be47db3300c237d19f882tree | snapshot
parentf0d051f19225c7b9e99c9d522a4b304c57ed3337commit | diff
child-rekey: Don't install outbound SA in case of lost collisions

This splits the SA installation also on the initiator, so we can avoid
installing the outbound SA if we lost a rekey collision, which might
have caused traffic loss depending on the timing of the DELETEs that are
sent in both directions.
src/libcharon/sa/ikev2/tasks/child_create.c diff | blob | history
src/libcharon/sa/ikev2/tasks/child_delete.c diff | blob | history
src/libcharon/sa/ikev2/tasks/child_rekey.c diff | blob | history
src/libcharon/tests/suites/test_child_rekey.c diff | blob | history
strongSwan - IPsec VPN