ikev1: Mark rekeyed CHILD_SAs as INSTALLED

Since we keep them around until they finally expire they otherwise would block
IKE_SA rekeying/reauthentication.

diff --git a/src/libcharon/sa/ikev1/tasks/quick_mode.c b/src/libcharon/sa/ikev1/tasks/quick_mode.c
index 828b166..4b5b016 100644 (file)
--- a/src/libcharon/sa/ikev1/tasks/quick_mode.c
+++ b/src/libcharon/sa/ikev1/tasks/quick_mode.c
@@ -401,6 +401,8 @@ static bool install(private_quick_mode_t *this)
        if (old)
        {
                charon->bus->child_rekey(charon->bus, old, this->child_sa);
+               /* rekeyed CHILD_SAs stay installed until they expire */
+               old->set_state(old, CHILD_INSTALLED);
        }
        else
        {