summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authortobhe <tobhe@openbsd.org>2020-09-17 13:19:27 +0000
committertobhe <tobhe@openbsd.org>2020-09-17 13:19:27 +0000
commit94cf310307fbd42400e4e0a3021f628894ad708c (patch)
tree00935686dbc511a692e63519f73381878cc68f20
parentMake pfctl(8) check if the rtable really exists when parsing the (diff)
downloadwireguard-openbsd-94cf310307fbd42400e4e0a3021f628894ad708c.tar.xz
wireguard-openbsd-94cf310307fbd42400e4e0a3021f628894ad708c.zip
Do not send DELETE messages for closing SAs.
ok markus@
-rw-r--r--sbin/iked/ikev2.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/sbin/iked/ikev2.c b/sbin/iked/ikev2.c
index 3fc5564b50e..5d765a6571d 100644
--- a/sbin/iked/ikev2.c
+++ b/sbin/iked/ikev2.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ikev2.c,v 1.257 2020/09/17 09:02:15 tobhe Exp $ */
+/* $OpenBSD: ikev2.c,v 1.258 2020/09/17 13:19:27 tobhe Exp $ */
/*
* Copyright (c) 2019 Tobias Heider <tobias.heider@stusta.de>
@@ -2994,7 +2994,7 @@ ikev2_record_dstid(struct iked *env, struct iked_sa *sa)
if (osa != NULL) {
sa_dstid_remove(env, osa);
if (env->sc_enforcesingleikesa &&
- osa->sa_state != IKEV2_STATE_CLOSED) {
+ osa->sa_state < IKEV2_STATE_CLOSING) {
log_info("%sreplaced by IKESA %s (identical DSTID)",
SPI_SA(osa, NULL),
print_spi(sa->sa_hdr.sh_ispi, 8));