From 3128e7fa7c390233c5fcb40a46416a31a13a9ff3 Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Mon, 9 Jul 2012 12:05:23 +0200
Subject: [PATCH] Don't send CERTREQs when initiating aggressive mode PSK

---
 src/libcharon/sa/ikev1/tasks/isakmp_cert_pre.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/libcharon/sa/ikev1/tasks/isakmp_cert_pre.c b/src/libcharon/sa/ikev1/tasks/isakmp_cert_pre.c
index 8ba5a2aa7..ea5da4ebc 100644
--- a/src/libcharon/sa/ikev1/tasks/isakmp_cert_pre.c
+++ b/src/libcharon/sa/ikev1/tasks/isakmp_cert_pre.c
@@ -349,6 +349,10 @@ METHOD(task_t, build_i, status_t,
 		case AGGRESSIVE:
 			if (this->state == CR_SA)
 			{
+				if (!use_certs(this, message))
+				{
+					return SUCCESS;
+				}
 				build_certreqs(this, message);
 			}
 			return NEED_MORE;