denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

child-create: Just abort CREATE_CHILD_SA request if nonce creation fails

Browse Source 
No need to send an illegal request with just an error notify.
This commit is contained in:
Tobias Brunner
2022-04-14 18:42:01 +02:00
parent 3b699c720f
commit 511033b3da
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev2/tasks/child_create.c
+1 -2
View File
@@ -1094,8 +1094,7 @@ METHOD(task_t, build_i, status_t,
case CREATE_CHILD_SA: case CREATE_CHILD_SA:
if (!generate_nonce(this)) if (!generate_nonce(this))
{ {
message->add_notify(message, FALSE, NO_PROPOSAL_CHOSEN, message->set_exchange_type(message, EXCHANGE_TYPE_UNDEFINED);
chunk_empty);
return SUCCESS; return SUCCESS;
} }
if (!this->retry && this->dh_group == MODP_NONE) if (!this->retry && this->dh_group == MODP_NONE)