denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ike-rekey: Reset IKE_SA on bus before sending CREATE_CHILD_SA response

Browse Source 
Even when there is no error the CREATE_CHILD_SA response should be sent
in the context of the existing IKE_SA.
This commit is contained in:
Tobias Brunner
2015-07-27 14:45:00 +02:00
parent 86d20b0b40
commit 2efcc95867
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev2/tasks/ike_rekey.c
+2 -1
View File
@@ -228,9 +228,10 @@ METHOD(task_t, build_r, status_t,
if (this->ike_init->task.build(&this->ike_init->task, message) == FAILED) if (this->ike_init->task.build(&this->ike_init->task, message) == FAILED)
{ {
charon->bus->set_sa(charon->bus, this->ike_sa);
return SUCCESS; return SUCCESS;
} }
charon->bus->set_sa(charon->bus, this->ike_sa);
this->ike_sa->set_state(this->ike_sa, IKE_REKEYING); this->ike_sa->set_state(this->ike_sa, IKE_REKEYING);
/* rekeying successful, delete the IKE_SA using a subtask */ /* rekeying successful, delete the IKE_SA using a subtask */