On Thu, 29 Aug 2019 20:08:29 +0200
Vukasin Karadzic <[email protected]> wrote:

> Hi,
>
> that option should enable using reauthentication of IKE SAs instead of
> rekeying them
> as per RFC7296 Section 2.8.3 (
> https://tools.ietf.org/html/rfc7296#section-2.8.3.),
> when libreswan is the initiator of rekeying (that is,
> reauthentication in this case).

OK. Not sure how to you would force that, or why Endian/StrongSwan
fails.

> And yes, it isn't documented in man pages.
>

Interesting...

> Don't know if that will help you solve your problem.

Me neither - it answers one question and asks another!

Thanks

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan

Reply via email to