denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

child-create: Don't fail creating IKE SA if only Child SA installation fails

Browse Source 
Fixes: d7760416d6 ("child-create: Add support for multiple key exchanges")
This commit is contained in:
Tobias Brunner
2026-07-21 10:21:51 +02:00
parent 8cd4ac9f53
commit 6894b33e6d
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev2/tasks/child_create.c
+2 -2
View File
@@ -2226,13 +2226,13 @@ static bool key_exchange_done_and_install_r(private_child_create_t *this,
case SUCCESS: case SUCCESS:
break; break;
case NOT_FOUND: case NOT_FOUND:
message->add_notify(message, TRUE, TS_UNACCEPTABLE, message->add_notify(message, FALSE, TS_UNACCEPTABLE,
chunk_empty); chunk_empty);
handle_child_sa_failure(this, message); handle_child_sa_failure(this, message);
return TRUE; return TRUE;
case FAILED: case FAILED:
default: default:
message->add_notify(message, TRUE, NO_PROPOSAL_CHOSEN, message->add_notify(message, FALSE, NO_PROPOSAL_CHOSEN,
chunk_empty); chunk_empty);
handle_child_sa_failure(this, message); handle_child_sa_failure(this, message);
return TRUE; return TRUE;