denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no DH group

Browse Source
This commit is contained in:
Martin Willi
2010-04-21 08:41:46 +02:00
parent d0f1b3b96f
commit 1f6a707d10
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/tasks/child_create.c
+5 -5
View File
@@ -329,11 +329,11 @@ static status_t select_and_install(private_child_create_t *this, bool no_dh)
this->dh_group = group; this->dh_group = group;
return INVALID_ARG; return INVALID_ARG;
} }
else /* the selected proposal does not use a DH group */
{ DBG1(DBG_IKE, "ignoring KE exchange, agreed on a non-PFS proposal");
DBG1(DBG_IKE, "no acceptable proposal found"); DESTROY_IF(this->dh);
return FAILED; this->dh = NULL;
} this->dh_group = MODP_NONE;
} }
if (my_vip == NULL) if (my_vip == NULL)