Android port disconnects old SAs when new ones are created

[Pupu Toivonen]

On Android, the system seems to keep only one SA at a time alive. When a new SA is formed, the old one gets disconnected. This shows specifically when the device registers to a HIP RVS server.

I'm not yet sure if this affects more than my device, what's causing it, and if it's a bug or a security feature.

[Pupu Toivonen (scolphoy)]

This was a manifestation of the issue with the Heartbeat extension (http://bazaar.launchpad.net/~hipl-core/hipl/trunk/revision/6449). The old connections were killed because ICMP6_ECHO_REPLY:s were not coming through, and in my tests this was timed conveniently enough to fool me.

See