diff options
author | tobhe <tobhe@cvs.openbsd.org> | 2020-11-30 21:52:48 +0000 |
---|---|---|
committer | tobhe <tobhe@cvs.openbsd.org> | 2020-11-30 21:52:48 +0000 |
commit | 24de9fc18bdcd89cf18494f54f67868607588047 (patch) | |
tree | 9bbc7df5f6bb234fb3e4efa74fffe0744a180ebf /sbin/iked/iked.h | |
parent | ddf2459395519963e414ba8563cca7e20dcab297 (diff) |
We need to rekey every child SA (even if acquired): Otherwise we can
get out of sync with the peer and the peer would keep on using the
expired SA because the lifetime is not negotiated.
ok patrick@
Diffstat (limited to 'sbin/iked/iked.h')
-rw-r--r-- | sbin/iked/iked.h | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/sbin/iked/iked.h b/sbin/iked/iked.h index f50df6e64e0..29c121d6d09 100644 --- a/sbin/iked/iked.h +++ b/sbin/iked/iked.h @@ -1,4 +1,4 @@ -/* $OpenBSD: iked.h,v 1.176 2020/11/29 21:00:43 tobhe Exp $ */ +/* $OpenBSD: iked.h,v 1.177 2020/11/30 21:52:47 tobhe Exp $ */ /* * Copyright (c) 2019 Tobias Heider <tobias.heider@stusta.de> @@ -180,7 +180,6 @@ struct iked_childsa { uint8_t csa_persistent;/* do not rekey */ uint8_t csa_esn; /* use ESN */ uint8_t csa_transport; /* transport mode */ - uint8_t csa_acquired; /* no rekey for me */ struct iked_spi csa_spi; |