ike-init: Make sure we received a KE payload as initiator
On the responder,dc8b479eb8("ike-init: Fix key derivation if SA is reset after IKE_INTERMEDIATE retransmits") fixed this. But the initiator still accepted IKE_INTERMEDIATE exchanges without KE payload. Fixes:0d49ddec2e("ike-init: Add support for multiple key exchanges")
This commit is contained in:
@@ -939,6 +939,7 @@ static void process_payloads_multi_ke(private_ike_init_t *this,
|
|||||||
else
|
else
|
||||||
{
|
{
|
||||||
DBG1(DBG_IKE, "KE payload missing in message");
|
DBG1(DBG_IKE, "KE payload missing in message");
|
||||||
|
this->ke_failed = TRUE;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user