wrstuden@netbsd.org said:
> Is your racoon current? There was a bug where it didn't flush old SAs
> when renegotiatiing. 

I've just updated both systems to be absulutely sure.
The bug is still there.
Perhaps I should send a PR...

best regards
Matthias