Reject quick modes if IKE_SA not yet established

This commit is contained in:
Martin Willi
2012-03-20 17:31:16 +01:00
parent 67a753b95c
commit a22b9e4f33
+6
View File
@@ -592,6 +592,12 @@ static status_t process_request(private_task_manager_t *this,
/* TODO-IKEv1: agressive mode */
return FAILED;
case QUICK_MODE:
if (this->ike_sa->get_state(this->ike_sa) != IKE_ESTABLISHED)
{
DBG1(DBG_IKE, "received quick mode request for "
"unestablished IKE_SA, ignored");
return FAILED;
}
task = (task_t *)quick_mode_create(this->ike_sa, NULL,
NULL, NULL);
this->passive_tasks->insert_last(this->passive_tasks, task);