Re: bin/18331 (racoon doesn't keep SAs in sync)

[spz%NetBSD.org@localhost]

Synopsis: racoon doesn't keep SAs in sync

State-Changed-From-To: open->closed
State-Changed-By: spz%NetBSD.org@localhost
State-Changed-When: Mon, 05 Aug 2013 05:51:07 +0000
State-Changed-Why:
As Martin Neitzel noted, this is "behaving as the protocol demands"
and thus not a bug in racoon.
One thing that was a unfortunate feature of racoon was that it tended
to use the oldest valid SA, thus if the sides weren't in clock sync they'd
talk past each other. This has been changed to "newest valid SA gets used"
with much happier outcomes if the clocks are somewhat off.