strongswan/src/libcharon/sa
Tobias Brunner ecba84a06b child-delete: Don't send delete for expired CHILD_SAs that were already rekeyed
The peer might not have seen the CREATE_CHILD_SA response yet, receiving a
DELETE for the SA could then trigger it to abort the rekeying, causing
the deletion of the newly established SA (it can't know whether the
DELETE was sent due to an expire or because the user manually deleted
it).  We just treat this SA as if we received a DELETE for it.  This is
not an ideal situation anyway, as it causes some traffic to get dropped,
so it should usually be avoided by setting appropriate soft and hard limits.

References #2815.
2018-11-22 11:31:53 +01:00
..
eap Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
ikev1 ikev1: Ensure DPD_ACK is sent in time 2018-11-20 10:24:48 +01:00
ikev2 child-delete: Don't send delete for expired CHILD_SAs that were already rekeyed 2018-11-22 11:31:53 +01:00
xauth Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
authenticator.c Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
authenticator.h authenticator: Add optional method to set PPK 2018-09-10 18:03:02 +02:00
child_sa.c child-sa: Use SA matching mark as SA set mark if the latter is %same 2018-08-31 12:26:40 +02:00
child_sa.h child-sa: Add new state to track deleted but not yet destroyed CHILD_SAs 2018-04-09 17:13:41 +02:00
child_sa_manager.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
child_sa_manager.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ike_sa.c ike-init: Switch to an alternative config if proposals don't match 2018-06-28 18:46:42 +02:00
ike_sa.h ikev2: Mark IKE_SAs that used PPK during authentication 2018-09-10 18:03:18 +02:00
ike_sa_id.c Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
ike_sa_id.h Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
ike_sa_manager.c ike-sa-manager: Log message when scheduling delete for reauthenticated IKE_SA 2018-08-29 15:46:37 +02:00
ike_sa_manager.h ike-sa-manager: Add method to change the initiator SPI of an IKE_SA 2017-09-04 11:16:00 +02:00
keymat.c Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
keymat.h Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
redirect_manager.c Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
redirect_manager.h Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
redirect_provider.h Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
shunt_manager.c child-cfg: Allow suppressing log messages when selecting traffic selectors 2018-06-28 18:46:42 +02:00
shunt_manager.h shunt-manager: Remove first match if no namespace given during uninstall 2018-02-22 11:31:05 +01:00
task.c Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
task.h Fixed some typos, courtesy of codespell 2018-09-17 18:51:44 +02:00
task_manager.c Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
task_manager.h Fixed some typos, courtesy of codespell 2018-02-13 12:19:54 +01:00
trap_manager.c child-cfg: Allow suppressing log messages when selecting traffic selectors 2018-06-28 18:46:42 +02:00
trap_manager.h trap-manager: Remove unused find_reqid() method 2018-02-22 11:31:05 +01:00