ikev2: Add task that verifies a peer's certificate

On failure the SA is deleted and reestablished as configured. The task is activated after the REAUTH_COMPLETE task so a make-before-break reauth is completed before the new SA might get torn down.
2016-03-10 11:07:15 +01:00
parent 034a462901
commit 8ce78e43a4
7 changed files with 183 additions and 2 deletions
@@ -29,6 +29,7 @@ ENUM(task_type_names, TASK_IKE_INIT, TASK_ISAKMP_CERT_POST,
 	"IKE_REAUTH",
 	"IKE_REAUTH_COMPLETE",
 	"IKE_REDIRECT",
+	"IKE_VERIFY_PEER_CERT",
 	"IKE_DELETE",
 	"IKE_DPD",
 	"IKE_VENDOR",