denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added a new alert that is raised if peer does not respond to initial IKE message

Browse Source
This commit is contained in:
Tobias Brunner
2012-10-16 14:16:17 +02:00
parent b00806cf85
commit 1d6dc62727
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/bus/bus.h
+2
View File
@@ -90,6 +90,8 @@ enum alert_t {
ALERT_PEER_AUTH_FAILED, ALERT_PEER_AUTH_FAILED,
/** failed to resolve peer address, no arguments */ /** failed to resolve peer address, no arguments */
ALERT_PEER_ADDR_FAILED, ALERT_PEER_ADDR_FAILED,
/** peer did not respond to initial message, current try (int, 0-based) */
ALERT_PEER_INIT_UNREACHABLE,
}; };
/** /**
src/libcharon/sa/ike_sa.c
+2
View File
@@ -1690,6 +1690,8 @@ METHOD(ike_sa_t, retransmit, status_t,
{ {
/* retry IKE_SA_INIT/Main Mode if we have multiple keyingtries */ /* retry IKE_SA_INIT/Main Mode if we have multiple keyingtries */
u_int32_t tries = this->peer_cfg->get_keyingtries(this->peer_cfg); u_int32_t tries = this->peer_cfg->get_keyingtries(this->peer_cfg);
charon->bus->alert(charon->bus, ALERT_PEER_INIT_UNREACHABLE,
this->keyingtry);
this->keyingtry++; this->keyingtry++;
if (tries == 0 || tries > this->keyingtry) if (tries == 0 || tries > this->keyingtry)
{ {