denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev1: Don't inherit children if INITITAL_CONTACT was seen

Browse Source 
Signed-off-by: Thomas Egerer <[email protected]>
This commit is contained in:
Thomas Egerer
2014-10-30 11:53:56 +01:00
committed by Martin Willi
parent 11b42933bf
commit 1201ddcbc5
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ike_sa_manager.c
+4 -1
View File
@@ -1783,7 +1783,10 @@ static status_t enforce_replace(private_ike_sa_manager_t *this,
if (is_ikev1_reauth(duplicate, host)) if (is_ikev1_reauth(duplicate, host))
{ {
/* looks like a reauthentication attempt */ /* looks like a reauthentication attempt */
adopt_children(duplicate, new); if (!new->has_condition(new, COND_INIT_CONTACT_SEEN))
{
adopt_children(duplicate, new);
}
/* For IKEv1 we have to delay the delete for the old IKE_SA. Some /* For IKEv1 we have to delay the delete for the old IKE_SA. Some
* peers need to complete the new SA first, otherwise the quick modes * peers need to complete the new SA first, otherwise the quick modes
* might get lost. */ * might get lost. */