Emeric,
> It seems to be related to: https://wiki.strongswan.org/issues/839#note-1
It is, and as discussed in that ticket, is a consequence of the
pair-wise (un-)installation of SAs.
To properly fix this issue, we would have to defer outbound SA
installation/activation as exchange responder to t
n] Packets dropped during CHILD SA rekeying
Hello,
Using FreeBSD 9.3, strongSwan 5.2.2
We're experiencing some dropped packets while CHILD SA are being rekeyed.
When rekeying a CHILD SA, we create a new set of IPsec SA, with new
inbound/outbound spi in the kernel.
Once done, we have two pa
Hello,
Using FreeBSD 9.3, strongSwan 5.2.2
We're experiencing some dropped packets while CHILD SA are being rekeyed.
When rekeying a CHILD SA, we create a new set of IPsec SA, with new
inbound/outbound spi in the kernel.
Once done, we have two pairs of IPsec SA living in the kernel, and we stil
