diff options
| author |   tobhe <tobhe@openbsd.org> | 2020-07-21 08:03:38 +0000 |
|---|---|---|
| committer | tobhe <tobhe@openbsd.org> | 2020-07-21 08:03:38 +0000 |
| commit | 38194102e48cb199d277da983c108250a3e28c42 (patch) | |
| tree | 49785c2a3f9f55eea84daf2ab73526292256f876 /usr.bin/mandoc/manpath.c | |
| parent | Make sure to explicit_bzero() buffers holding sensitive SA data. (diff) | |
| download | wireguard-openbsd-38194102e48cb199d277da983c108250a3e28c42.tar.xz wireguard-openbsd-38194102e48cb199d277da983c108250a3e28c42.zip | |
Handle TEMPORARY_FAILURE notification on IKESA rekeying.
If we rekey both the IKESA and an CHILDSA in a small time
window a strongswan peer might reposend with a TEMPORARY_FAILURE
notification.
In this case we retry the rekey of the IKESA after a short
timeout and queue PFKEY expire messages (by returning -1 in
ikev2_rekey_sa()), so the CHILDSA rekeying gets delayed.
ok markus@
Diffstat (limited to 'usr.bin/mandoc/manpath.c')
0 files changed, 0 insertions, 0 deletions