OpenBSD/src KPX3EqD — sbin/iked ikev2.c ikev2_pld.c
Fix conflict when IKE SA and Child SA rekeying happen at the same time. If the IKE SA changes during an ongoing rekey exchange, messages may be lost because they were inteded for the old SA. An iked instance that is waiting for a rekey Child SA response will no longer reply to IKE SA rekey requests until the ongoing Child SA exchange has completed or timed out. ok sthen@
Version | Delta | File | |
---|---|---|---|
1.174 | +10 | -1 | sbin/iked/ikev2.c |
1.74 | +10 | -1 | sbin/iked/ikev2_pld.c |
+20 | -2 | 2 files |