Store proposal number in proposal_t to reuse it in the selected proposal
According to RFC 5996 3.3.1, we MUST reuse the proposal number of the selected proposal in the SA payload reply.
This commit is contained in:
@@ -136,7 +136,7 @@ static void process_ike_add(private_ha_dispatcher_t *this, ha_message_t *message
|
||||
diffie_hellman_t dh = { .get_shared_secret = get_shared_secret,
|
||||
.destroy = (void*)&secret };
|
||||
|
||||
proposal = proposal_create(PROTO_IKE);
|
||||
proposal = proposal_create(PROTO_IKE, 0);
|
||||
keymat = ike_sa->get_keymat(ike_sa);
|
||||
if (integ)
|
||||
{
|
||||
@@ -549,7 +549,7 @@ static void process_child_add(private_ha_dispatcher_t *this,
|
||||
child_sa->set_protocol(child_sa, PROTO_ESP);
|
||||
child_sa->set_ipcomp(child_sa, ipcomp);
|
||||
|
||||
proposal = proposal_create(PROTO_ESP);
|
||||
proposal = proposal_create(PROTO_ESP, 0);
|
||||
if (integ)
|
||||
{
|
||||
proposal->add_algorithm(proposal, INTEGRITY_ALGORITHM, integ, 0);
|
||||
|
||||
Reference in New Issue
Block a user