[Openswan dev] Yet another DPD issue

[Michael Richardson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


>>>>> "Mark-Andre" == Mark-Andre Hopf <mhopf at innominate.com> writes:
    Mark-Andre> o The EVENT_SA_REPLACE event with 54s is the IPsec
    Mark-Andre> SA. When there are only 5s left, powercycle the
    Mark-Andre> Responder at once. (Assuming that it takes more than 5s
    Mark-Andre> for Pluto to be ready again ;) .)

  Yup. That's because the DPD was associated with the phase 2, and can
not be started until such time as the phase 1 has completed.

http://git.openswan.org/cgi-bin/gitweb.cgi?p=openswan.git;a=commit;h=c75967b03b2c478a612aef4ccb7e5dff6e4bdaf5

- -- 
]            Bear: "Me, I'm just the shape of a bear."          |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Finger me for keys

iQEVAwUBRpuRroCLcPvd0N1lAQJqOgf/TIHpoZvoxl2H5G4N+qxkcFzNlRc+WEJP
VgCRi8x2Zu/ZGi9gtmTL+yCxJL/BdNr5Fslu2SCCXTpA+T40182khUTVhkWgsmaF
VDhJMTOUxSwayZTNGr69z3BcB/CBXE1Y6IFWCHYnGeL6jvAOqHcNkTpKs3+DpeKV
ydiWFJiYhbNK/1tJTQji5dO8CcaKNJG0XSIAQh1zzS48o3OUxpuFoGS2inLjB+G0
u8UnYsroH0pKTGPsXD0758Zswr0W2kC7Le1lHbUtulbliABYAORXVuHeIb48OrwJ
B9hOQiVWUgXGSYO9CpC+3gXOHB0qbOpygVwig50vgaym7LPgAYXj+g==
=mlDC
-----END PGP SIGNATURE-----