child-rekey: Don't destroy IKE_SA if initiating CHILD_SA rekeying failed
This could happen if the peer e.g. selects an invalid DH group or responds multiple time with an INVALID_KE_PAYLAOD notify.
This commit is contained in:
@@ -213,7 +213,8 @@ METHOD(task_t, build_i, status_t,
|
|||||||
message) != NEED_MORE)
|
message) != NEED_MORE)
|
||||||
{
|
{
|
||||||
schedule_delayed_rekey(this);
|
schedule_delayed_rekey(this);
|
||||||
return FAILED;
|
message->set_exchange_type(message, EXCHANGE_TYPE_UNDEFINED);
|
||||||
|
return SUCCESS;
|
||||||
}
|
}
|
||||||
if (message->get_exchange_type(message) == CREATE_CHILD_SA)
|
if (message->get_exchange_type(message) == CREATE_CHILD_SA)
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user