X-Git-Url: https://www.tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=src%2Fnet.c;h=7f17252d3d52ea432f4ed4fe77fce8b12d9d1c48;hp=0cdc72cc5ad8f150ad6520f20ef06d1847850098;hb=3308d13e7e3bf20cfeaf6f2ab17228a9820cea66;hpb=43fa7283ac01f2ecc95381b519ef6b3342546f35

diff --git a/src/net.c b/src/net.c
index 0cdc72cc..7f17252d 100644
--- a/src/net.c
+++ b/src/net.c
@@ -414,11 +414,19 @@ int main_loop(void)
 			/* Should we regenerate our key? */
 
 			if(keyexpires < now) {
-				ifdebug(STATUS) logger(LOG_INFO, _("Regenerating symmetric key"));
+				avl_node_t *node;
+				node_t *n;
+
+				ifdebug(STATUS) logger(LOG_INFO, _("Expiring symmetric keys"));
+
+				for(node = node_tree->head; node; node = node->next) {
+					n = node->data;
+					if(n->inkey) {
+						free(n->inkey);
+						n->inkey = NULL;
+					}
+				}
 
-				RAND_pseudo_bytes((unsigned char *)myself->key, myself->keylength);
-				if(myself->cipher)
-					EVP_DecryptInit_ex(&packet_ctx, myself->cipher, NULL, (unsigned char *)myself->key, (unsigned char *)myself->key + myself->cipher->key_len);
 				send_key_changed(broadcast, myself);
 				keyexpires = now + keylifetime;
 			}