On Sun, 10 Feb 2019 at 23:18, Paul Wouters <[email protected]> wrote:
> It is called from v2_event_sa_rekey() and v2_event_sa_replace()
>
> The calls pass a child st state.
[...]
> Then it checks:
>
> if (IS_IKE_SA(st)) {
> ike = pexpect_ike_sa(st);
> cst = state_with_serialno(c->newest_ipsec_sa);
>
>
> This seems questionable, as we only ever pass in child states.....
Are you sure? Greping the test results for 'rekeying stale IKE SA'
and 'replacing stale IKE SA' both get matches.
_______________________________________________
Swan-dev mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-dev
