sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-09 00:00:53 -04:00
Code Issues Projects Releases Wiki Activity

ikev2: Apply extensions and conditions before starting rekeying

Browse Source 
The extensions and conditions apply to the rekeyed IKE_SA as well, so we should
migrate them. Especially when using algorithms from private space, we need
EXT_STRONGSWAN to properly select these algorithms during IKE rekeying.
This commit is contained in:
Martin Willi 2014-04-10 10:24:34 +02:00
parent 713a1122b4
commit 094963d1b1
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/libcharon/sa/ike_sa.c
View File

@ -2028,6 +2028,12 @@ METHOD(ike_sa_t, inherit_pre, void,
set_peer_cfg(this, other->peer_cfg); set_peer_cfg(this, other->peer_cfg);
set_my_host(this, other->my_host->clone(other->my_host)); set_my_host(this, other->my_host->clone(other->my_host));
set_other_host(this, other->other_host->clone(other->other_host)); set_other_host(this, other->other_host->clone(other->other_host));
/* apply extensions and conditions with a few exceptions */
this->extensions = other->extensions;
this->conditions = other->conditions;
this->conditions &= ~COND_STALE;
this->conditions &= ~COND_REAUTHENTICATING;
} }
METHOD(ike_sa_t, inherit_post, void, METHOD(ike_sa_t, inherit_post, void,