denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

send proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH mismatches

Browse Source
This commit is contained in:
Martin Willi
2009-02-10 17:21:44 +00:00
parent 04a7a1c309
commit 95f1735f87
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/sa/tasks/ike_auth.c
+6
View File
@@ -336,6 +336,12 @@ static status_t build_auth_eap(private_ike_auth_t *this, message_t *message)
authenticator_t *auth; authenticator_t *auth;
auth_payload_t *auth_payload; auth_payload_t *auth_payload;
if (!this->initiator && !this->peer_authenticated)
{
message->add_notify(message, TRUE, AUTHENTICATION_FAILED, chunk_empty);
return FAILED;
}
auth = (authenticator_t*)this->eap_auth; auth = (authenticator_t*)this->eap_auth;
if (auth->build(auth, this->my_packet->get_data(this->my_packet), if (auth->build(auth, this->my_packet->get_data(this->my_packet),
this->other_nonce, &auth_payload) != SUCCESS) this->other_nonce, &auth_payload) != SUCCESS)