[Swan-dev] ikev2: only count empty informational messages as liveness probes
paul.wouters at aiven.io
Fri May 21 12:54:37 UTC 2021
Author: Andrew Cagney <cagney at gnu.org>
Date: Thu May 20 11:21:33 2021 -0400
ikev2: only count empty informational messages as liveness probes
was including informational messages with notify payloads
This is not correct through. Any informational message can contain
notify payloads. In theory they should all include NAT detection
payloads in case a NAT appeared out of nowhere.
But also, every exchange message that proved it is a new sequence number
counts as "liveness probe". So if a REKEY happens, the "liveness" should
also be updated.
More information about the Swan-dev