diff options
author | 2020-09-17 13:19:27 +0000 | |
---|---|---|
committer | 2020-09-17 13:19:27 +0000 | |
commit | 94cf310307fbd42400e4e0a3021f628894ad708c (patch) | |
tree | 00935686dbc511a692e63519f73381878cc68f20 | |
parent | Make pfctl(8) check if the rtable really exists when parsing the (diff) | |
download | wireguard-openbsd-94cf310307fbd42400e4e0a3021f628894ad708c.tar.xz wireguard-openbsd-94cf310307fbd42400e4e0a3021f628894ad708c.zip |
Do not send DELETE messages for closing SAs.
ok markus@
-rw-r--r-- | sbin/iked/ikev2.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sbin/iked/ikev2.c b/sbin/iked/ikev2.c index 3fc5564b50e..5d765a6571d 100644 --- a/sbin/iked/ikev2.c +++ b/sbin/iked/ikev2.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ikev2.c,v 1.257 2020/09/17 09:02:15 tobhe Exp $ */ +/* $OpenBSD: ikev2.c,v 1.258 2020/09/17 13:19:27 tobhe Exp $ */ /* * Copyright (c) 2019 Tobias Heider <tobias.heider@stusta.de> @@ -2994,7 +2994,7 @@ ikev2_record_dstid(struct iked *env, struct iked_sa *sa) if (osa != NULL) { sa_dstid_remove(env, osa); if (env->sc_enforcesingleikesa && - osa->sa_state != IKEV2_STATE_CLOSED) { + osa->sa_state < IKEV2_STATE_CLOSING) { log_info("%sreplaced by IKESA %s (identical DSTID)", SPI_SA(osa, NULL), print_spi(sa->sa_hdr.sh_ispi, 8)); |