d048a319df
When doing a rekey for a CHILD_SA, the use counters get reset. An inactivity job is queued for a time unrelated to the rekey time, so it might happen that the inactivity job gets executed just after rekeying. If this happens, inactivity is detected even if we had traffic on the rekeyed CHILD_SA just before rekeying. This change implies that inactivity checks can't handle inactivity timeouts for rekeyed CHILD_SAs, and therefore requires that inactivity timeout is shorter than the rekey time to have any effect. |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| Makefile.am | ||
| ipsec.conf.5.in | ||
| ipsec.secrets.5.in | ||
| strongswan.conf.5.in | ||