denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ike-sa: Reauthenticate to the same addresses we currently use

Browse Source 
If the SA got redirected this would otherwise cause a reauthentication with
the original gateway.  Reestablishing the SA to the original gateway, if e.g.
the new gateway is not reachable makes sense though.
This commit is contained in:
Tobias Brunner
2016-03-04 16:03:00 +01:00
parent c13eb73719
commit 7505fb8d45
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ike_sa.c
+5 -2
View File
@@ -1950,8 +1950,11 @@ METHOD(ike_sa_t, reestablish, status_t,
host = this->my_host; host = this->my_host;
new->set_my_host(new, host->clone(host)); new->set_my_host(new, host->clone(host));
charon->bus->ike_reestablish_pre(charon->bus, &this->public, new); charon->bus->ike_reestablish_pre(charon->bus, &this->public, new);
/* resolve hosts but use the old addresses above as fallback */ if (!has_condition(this, COND_REAUTHENTICATING))
resolve_hosts((private_ike_sa_t*)new); { /* reauthenticate to the same addresses, but resolve hosts if
* reestablishing (old addresses serve as fallback) */
resolve_hosts((private_ike_sa_t*)new);
}
/* if we already have a virtual IP, we reuse it */ /* if we already have a virtual IP, we reuse it */
enumerator = array_create_enumerator(this->my_vips); enumerator = array_create_enumerator(this->my_vips);
while (enumerator->enumerate(enumerator, &host)) while (enumerator->enumerate(enumerator, &host))