projects / strongswan.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b4f24ac) | patch
child-rekey: Ignore failed colliding CHILD_SA rekeyings
authorTobias Brunner <tobias@strongswan.org>
Thu, 2 Jun 2016 15:23:35 +0000 (17:23 +0200)
committerTobias Brunner <tobias@strongswan.org>
Fri, 17 Jun 2016 16:48:08 +0000 (18:48 +0200)
commit6d8041d46b75a1f2b023a00f2eac5228263c9f17
treedba6d8965f7af7a07d64ade16288da8fb9f5dddatree | snapshot
parentb4f24ac0f65c24844369491d5b0c0d4546a51720commit | diff
child-rekey: Ignore failed colliding CHILD_SA rekeyings

If a passive rekeying fails due to an INVALID_KE_PAYLOAD we don't want
to consider this task later when resolving collisions.  This previously
might have caused the wrong SA to get deleted/installed based on the nonces
in the unsuccessful exchange.
src/libcharon/sa/ikev2/tasks/child_rekey.c diff | blob | history
strongSwan - IPsec VPN