ikev2: Compare initiator flag again, partially reverts 17ec1c74de
We should ignore messages that have the flag set incorrectly. This restores RFC compliance which was broken since the mentioned commit.
This commit is contained in:
@@ -157,6 +157,8 @@ static bool entry_match_by_id(entry_t *entry, ike_sa_id_t *id)
|
||||
}
|
||||
if ((id->get_responder_spi(id) == 0 ||
|
||||
entry->ike_sa_id->get_responder_spi(entry->ike_sa_id) == 0) &&
|
||||
(id->get_ike_version(id) == IKEV1_MAJOR_VERSION ||
|
||||
id->is_initiator(id) == entry->ike_sa_id->is_initiator(entry->ike_sa_id)) &&
|
||||
id->get_initiator_spi(id) == entry->ike_sa_id->get_initiator_spi(entry->ike_sa_id))
|
||||
{
|
||||
/* this is TRUE for IKE_SAs that we initiated but have not yet received a response */
|
||||
|
||||
Reference in New Issue
Block a user