ikev1: Mark rekeyed CHILD_SAs as INSTALLED
Since we keep them around until they finally expire they otherwise would block IKE_SA rekeying/reauthentication.
This commit is contained in:
parent
7d02f8dbf4
commit
5c6a62ceb6
|
@ -401,6 +401,8 @@ static bool install(private_quick_mode_t *this)
|
|||
if (old)
|
||||
{
|
||||
charon->bus->child_rekey(charon->bus, old, this->child_sa);
|
||||
/* rekeyed CHILD_SAs stay installed until they expire */
|
||||
old->set_state(old, CHILD_INSTALLED);
|
||||
}
|
||||
else
|
||||
{
|
||||
|
|
Loading…
Reference in New Issue