From 059d694a6b26273e3d33a080580b00b6d3c4284f Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Mon, 21 Nov 2011 14:36:05 +0100
Subject: [PATCH] Derive IKE keys as IKEv1 initiator, too

---
 src/libcharon/sa/tasks/main_mode.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/libcharon/sa/tasks/main_mode.c b/src/libcharon/sa/tasks/main_mode.c
index 89ecaf408..8b2b4c0d9 100644
--- a/src/libcharon/sa/tasks/main_mode.c
+++ b/src/libcharon/sa/tasks/main_mode.c
@@ -560,6 +560,12 @@ METHOD(task_t, process_i, status_t,
 			}
 			this->nonce_r = nonce_payload->get_nonce(nonce_payload);
 
+			if (!derive_keys(this, this->nonce_i, this->nonce_r))
+			{
+				DBG1(DBG_IKE, "key derivation failed");
+				return FAILED;
+			}
+
 			return NEED_MORE;
 		}
 		case MM_AUTH: