ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity

ike-sa: Properly set timing info for delete after rekeying 

The job is queued properly, yet the timing information is wrong.

Signed-off-by: Stefan Berghofer <stefan.berghofer@secunet.com>

Fixes: ee61471113 ("implemented RFC4478 (repeated authentication)...")
This commit is contained in:
Stefan Berghofer 2021-02-18 09:43:10 +01:00 committed by Tobias Brunner
parent d65d4eab73
commit f7613cb581
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/libcharon/sa/ike_sa.c
View File

@ -2984,7 +2984,7 @@ METHOD(ike_sa_t, inherit_post, void,
this->stats[STAT_REAUTH] = other->stats[STAT_REAUTH];
reauth = max(0, this->stats[STAT_REAUTH] - now);
delete = reauth + this->peer_cfg->get_over_time(this->peer_cfg);
this->stats[STAT_DELETE] = this->stats[STAT_REAUTH] + delete;
this->stats[STAT_DELETE] = now + delete;
DBG1(DBG_IKE, "rescheduling reauthentication in %ds after rekeying, "
"lifetime reduced to %ds", reauth, delete);
lib->scheduler->schedule_job(lib->scheduler,