Derive IKEv1 CHILD_SA keymat twice, once for each IPsec SA

2012-03-20 17:30:50 +01:00
parent 85f5c478bf
commit a7910b1c6e
3 changed files with 31 additions and 24 deletions
@@ -124,7 +124,8 @@ static bool install(private_quick_mode_t *this)
 	tsi->insert_last(tsi, this->tsi);
 	tsr->insert_last(tsr, this->tsr);
 	if (this->keymat->derive_child_keys(this->keymat, this->proposal, NULL,
-			this->nonce_i, this->nonce_r, &encr_i, &integ_i, &encr_r, &integ_r))
+						this->spi_i, this->spi_r, this->nonce_i, this->nonce_r,
+						&encr_i, &integ_i, &encr_r, &integ_r))
 	{
 		if (this->initiator)
 		{