[Openswan Users] Keylife and ikelifetime

[Paul Wouters]

On Tue, 23 Dec 2008, openswan at thefeds.net wrote:

> I will try specifying the fuzz. Currently I am seeing some SAs lasting for
> only 30% of the locally configured life (local life = remote life).

Which end is initiating the rekey? If the other end has a shorter life, it could
potentially initiate the rekey, regardless of the local settings.

Paul