From 66147ef6700d4ad1af00083580823fa48b129408 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Tue, 24 Mar 2015 09:37:38 +0100 Subject: [PATCH] ikev1: Inverse check when applying received KE value during Quick Mode Fixes Quick Mode negotiation when PFS is in use. --- src/libcharon/sa/ikev1/tasks/quick_mode.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libcharon/sa/ikev1/tasks/quick_mode.c b/src/libcharon/sa/ikev1/tasks/quick_mode.c index b48ace4ca..982c12851 100644 --- a/src/libcharon/sa/ikev1/tasks/quick_mode.c +++ b/src/libcharon/sa/ikev1/tasks/quick_mode.c @@ -493,7 +493,7 @@ static bool get_ke(private_quick_mode_t *this, message_t *message) DBG1(DBG_IKE, "KE payload missing"); return FALSE; } - if (this->dh->set_other_public_value(this->dh, + if (!this->dh->set_other_public_value(this->dh, ke_payload->get_key_exchange_data(ke_payload))) { DBG1(DBG_IKE, "unable to apply received KE value");