Hi Divya, > I'm deleting a particular connection (PROTECT-BTSSM2~MPLANE2) and I > can see from the logs that this connection is deleted, terminated, > unrouted and the kernel polices are being removed (at 14:03:45). > Still a CHILD_SA is successfully established with this connection (at > 14:03:46).
Note that the daemon is multi-threaded. If the connection is established concurrently with deleting configs (which it looks like in the log) the thread creating the SA might already have a reference to the config. And established connections are not affected by config changes. So you'll have to "down" any existing connections manually after deleting a config. Regards, Tobias _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
