CVSROOT: /cvs Module name: src Changes by: to...@cvs.openbsd.org 2020/05/01 15:07:06
Modified files:
sbin/iked : ikev2.c
Log message:
When initiating IKE SA rekeying, make sure to send a key from a mutual
DH group (as negotiated by IKE_SA_INIT) instead of one from the configured
policy. Not doing so may result in INVALID_KE errors.
ok patrick@
