Handle invalid IKEv1 hashes more specifically.

src/libcharon/encoding/message.c

@@ -1942,7 +1942,7 @@ METHOD(message_t, parse_body, status_t,
 				DBG1(DBG_ENC, "our hash does not match received %B",
 					 &other_hash);
 				chunk_free(&hash);
-				return VERIFY_ERROR;
+				return FAILED;
 			}
 			DBG2(DBG_ENC, "verified IKEv1 message with hash %B", &hash);
 			chunk_free(&hash);

src/libcharon/encoding/payloads/notify_payload.h

@@ -51,6 +51,8 @@ enum notify_type_t {
 	/* IKEv1 only */
 	PAYLOAD_MALFORMED = 16,
 	INVALID_KE_PAYLOAD = 17,
+	/* IKEv1 only */
+	INVALID_HASH_INFORMATION = 23,
 	AUTHENTICATION_FAILED = 24,
 	SINGLE_PAIR_REQUIRED = 34,
 	NO_ADDITIONAL_SAS = 35,