Accept rekey Child request with negotiated IKE DH group

First Child SA, and all additional additional Child SAs that do not
have user specified DH groups are set up with crypto keys that are
implicitly generated by the negotiated IKE DH group. For those
Child SAs, incoming rekey requests that match the negotiated IKE DH
group should also be acceptable. This will improve interoperability
of the IKE client.

Bug: 186650467
Test: FrameworksIkeTests (new tests added)
Change-Id: I98a76944b4444568f67bd21a356da78800d3f53a
2 files changed
tree: 39bbe6ceb2d7a95f3d379a19fe5b55a195c4cb0a
  1. apex/
  2. api/
  3. src/
  4. tests/
  5. Android.bp
  6. jarjar-rules-shared.txt
  7. jarjar-rules-test.txt
  8. lint-baseline.xml
  9. OWNERS
  10. PREUPLOAD.cfg
  11. README.md
  12. TEST_MAPPING
README.md

IKEv2 Library for Android

Introduction

This IKEv2 library is an in-process client library implementing the IKEv2 protocol as well as extensions necessary for the support of IWLAN. It is designed to work in a non-privileged fashion on top of the Android IPsec API surface.