ok mikeb@
2013/11/28 Markus Friedl <[email protected]> > CVSROOT: /cvs > Module name: src > Changes by: [email protected] 2013/11/28 13:24:48 > > Modified files: > sbin/iked : policy.c > > Log message: > sa_lookup: don't compare with sh_rspi if rspi is not set > > otherwise this can happen: initiator retransmits SA_INIT > with rspi of zero, sa_lookup for responder fails, and > it creates a new SA, that cannot be inserted in the SA tree
