Reject quick modes if IKE_SA not yet established
This commit is contained in:
@@ -592,6 +592,12 @@ static status_t process_request(private_task_manager_t *this,
|
|||||||
/* TODO-IKEv1: agressive mode */
|
/* TODO-IKEv1: agressive mode */
|
||||||
return FAILED;
|
return FAILED;
|
||||||
case QUICK_MODE:
|
case QUICK_MODE:
|
||||||
|
if (this->ike_sa->get_state(this->ike_sa) != IKE_ESTABLISHED)
|
||||||
|
{
|
||||||
|
DBG1(DBG_IKE, "received quick mode request for "
|
||||||
|
"unestablished IKE_SA, ignored");
|
||||||
|
return FAILED;
|
||||||
|
}
|
||||||
task = (task_t *)quick_mode_create(this->ike_sa, NULL,
|
task = (task_t *)quick_mode_create(this->ike_sa, NULL,
|
||||||
NULL, NULL);
|
NULL, NULL);
|
||||||
this->passive_tasks->insert_last(this->passive_tasks, task);
|
this->passive_tasks->insert_last(this->passive_tasks, task);
|
||||||
|
|||||||
Reference in New Issue
Block a user