denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Block XAuth transaction on established IKE_SAs, but allow Mode Config

Browse Source
This commit is contained in:
Martin Willi
2012-08-03 13:07:57 +02:00
parent decc467a4f
commit 764035d515
2 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ike_sa.c
-1
View File
@@ -1209,7 +1209,6 @@ METHOD(ike_sa_t, process_message, status_t,
{ {
case ID_PROT: case ID_PROT:
case AGGRESSIVE: case AGGRESSIVE:
case TRANSACTION:
case IKE_SA_INIT: case IKE_SA_INIT:
case IKE_AUTH: case IKE_AUTH:
if (this->state != IKE_CREATED && if (this->state != IKE_CREATED &&
src/libcharon/sa/ikev1/task_manager_v1.c
+1 -1
View File
@@ -879,7 +879,7 @@ static status_t process_request(private_task_manager_t *this,
} }
break; break;
case TRANSACTION: case TRANSACTION:
if (this->ike_sa->get_state(this->ike_sa) == IKE_ESTABLISHED) if (this->ike_sa->get_state(this->ike_sa) != IKE_CONNECTING)
{ {
task = (task_t *)mode_config_create(this->ike_sa, FALSE); task = (task_t *)mode_config_create(this->ike_sa, FALSE);
} }