ikev1: Signal IKE_SA connection failure via bus
This is mainly for HA where a passive SA was already created when the IKE keys were derived. If e.g. an authentication error occurs later that SA wouldn't get cleaned up.
This commit is contained in:
@@ -721,6 +721,7 @@ METHOD(task_manager_t, initiate, status_t,
|
|||||||
{
|
{
|
||||||
case IKE_CONNECTING:
|
case IKE_CONNECTING:
|
||||||
/* close after sending an INFORMATIONAL when unestablished */
|
/* close after sending an INFORMATIONAL when unestablished */
|
||||||
|
charon->bus->ike_updown(charon->bus, this->ike_sa, FALSE);
|
||||||
return FAILED;
|
return FAILED;
|
||||||
case IKE_DELETING:
|
case IKE_DELETING:
|
||||||
/* close after sending a DELETE */
|
/* close after sending a DELETE */
|
||||||
|
|||||||
Reference in New Issue
Block a user