child-rekey: Don't install outbound SA in case of lost collisions
authorTobias Brunner <tobias@strongswan.org>
Fri, 4 Aug 2017 11:12:57 +0000 (13:12 +0200)
committerTobias Brunner <tobias@strongswan.org>
Mon, 7 Aug 2017 08:46:00 +0000 (10:46 +0200)
commit15e745cf4d1257df2b1cdf83961e0838b601ade5
treeb23a492ae9d2cb2d801be47db3300c237d19f882
parentf0d051f19225c7b9e99c9d522a4b304c57ed3337
child-rekey: Don't install outbound SA in case of lost collisions

This splits the SA installation also on the initiator, so we can avoid
installing the outbound SA if we lost a rekey collision, which might
have caused traffic loss depending on the timing of the DELETEs that are
sent in both directions.
src/libcharon/sa/ikev2/tasks/child_create.c
src/libcharon/sa/ikev2/tasks/child_delete.c
src/libcharon/sa/ikev2/tasks/child_rekey.c
src/libcharon/tests/suites/test_child_rekey.c