ikev2: Prevent IKE_SA rekeying if we are currently retrying a CHILD_SA rekey

This commit is contained in:
Martin Willi 2014-11-21 12:10:16 +01:00
parent c39b0c883d
commit 8891ed5478

View File

@ -163,6 +163,7 @@ METHOD(task_t, process_r, status_t,
{
case CHILD_CREATED:
case CHILD_REKEYING:
case CHILD_RETRYING;
case CHILD_DELETING:
/* we do not allow rekeying while we have children in-progress */
DBG1(DBG_IKE, "peer initiated rekeying, but a child is half-open");