From 511033b3da75b2b35a23d6c3ecb3bfaffd691f91 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Thu, 20 May 2021 17:55:54 +0200 Subject: [PATCH] child-create: Just abort CREATE_CHILD_SA request if nonce creation fails No need to send an illegal request with just an error notify. --- src/libcharon/sa/ikev2/tasks/child_create.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/libcharon/sa/ikev2/tasks/child_create.c b/src/libcharon/sa/ikev2/tasks/child_create.c index 5a6c1b431..399aa1f81 100644 --- a/src/libcharon/sa/ikev2/tasks/child_create.c +++ b/src/libcharon/sa/ikev2/tasks/child_create.c @@ -1094,8 +1094,7 @@ METHOD(task_t, build_i, status_t, case CREATE_CHILD_SA: if (!generate_nonce(this)) { - message->add_notify(message, FALSE, NO_PROPOSAL_CHOSEN, - chunk_empty); + message->set_exchange_type(message, EXCHANGE_TYPE_UNDEFINED); return SUCCESS; } if (!this->retry && this->dh_group == MODP_NONE)