CVSROOT: /cvs Module name: src Changes by: to...@cvs.openbsd.org 2019/08/24 07:09:39
Modified files: sbin/iked : ikev2.c ikev2_pld.c Log message: Fix conflict when IKE SA and Child SA rekeying happen at the same time. If the IKE SA changes during an ongoing rekey exchange, messages may be lost because they were inteded for the old SA. An iked instance that is waiting for a rekey Child SA response will no longer reply to IKE SA rekey requests until the ongoing Child SA exchange has completed or timed out. ok sthen@