CVSROOT: /cvs
Module name: src
Changes by: to...@cvs.openbsd.org 2019/08/24 07:09:39
Modified files:
sbin/iked : ikev2.c ikev2_pld.c
Log message:
Fix conflict when IKE SA and Child SA rekeying happen at the same time.
If the IKE SA changes during an ongoing rekey exchange, messages may be
lost because they were inteded for the old SA. An iked instance that is
waiting for a rekey Child SA response will no longer reply to IKE SA
rekey requests until the ongoing Child SA exchange has completed or
timed out.
ok sthen@
