mirror of
https://github.com/netbirdio/netbird.git
synced 2026-08-31 12:01:29 +02:00
15ae046599
pqControllerReoffer returned true whenever we are the controller running the KEM, even when ShouldSendBootstrapOffer was false — which is the steady state for every PQ peer past its bootstrap (exchange in awaitingRekey) and for non-capable peers. handleRemoteOffer then returned early, dropping the ICE credentials and relay info carried in the peer's offer, so a responder-initiated reconnect (the normal path under lazy connections) stalled: the controller only recovered on its own guard timing. Return true only when a re-offer was actually sent; otherwise fall through to the normal offer handling (sendAnswer + notifyListeners) so the connection can come up on the retained PSK. A stale PSK still self-heals via the WG watcher, which triggers a fresh signal offer that re-bootstraps.