diff options
| author |   mikeb <mikeb@openbsd.org> | 2017-03-27 17:17:49 +0000 |
|---|---|---|
| committer | mikeb <mikeb@openbsd.org> | 2017-03-27 17:17:49 +0000 |
| commit | e254d6eae5b6277d0b97381fd89b167e55a275bf (patch) | |
| tree | 46987267758ee8d941de884721838a4b5af3bbe5 /sys/kern/subr_hibernate.c | |
| parent | various fixes to bring this page up to date a little; (diff) | |
| download | wireguard-openbsd-e254d6eae5b6277d0b97381fd89b167e55a275bf.tar.xz wireguard-openbsd-e254d6eae5b6277d0b97381fd89b167e55a275bf.zip | |
Don't cache the DH group in the policy
When tearing IKE SA down, the DH group referred by it is destroyed,
however it remains cached in the policy. With the introduction of
IKE SA rekeying we have extended the life of this dangling pointer
by reusing it on new SAs. So instead of caching the pointer in the
policy we can store the DH group ID and create a DH group on demand
using this parameter if it's specified.
With and OK reyk
Diffstat (limited to 'sys/kern/subr_hibernate.c')
0 files changed, 0 insertions, 0 deletions