ikev2: close an established IKE_SA when receiving AUTHENTICATION_FAILED
RFC 5996 compatible implementations MAY send an INFORMATIONAL message with an AUTHENTICATION_FAILED if the initiator failed to authenticate us. Handle such a message like a DELETE for an IKE_SA.
This commit is contained in:
@@ -849,6 +849,12 @@ static status_t process_request(private_task_manager_t *this,
|
|||||||
task = (task_t*)ike_auth_lifetime_create(
|
task = (task_t*)ike_auth_lifetime_create(
|
||||||
this->ike_sa, FALSE);
|
this->ike_sa, FALSE);
|
||||||
break;
|
break;
|
||||||
|
case AUTHENTICATION_FAILED:
|
||||||
|
/* initiator failed to authenticate us.
|
||||||
|
* We use ike_delete to handle this, which
|
||||||
|
* invokes all the required hooks. */
|
||||||
|
task = (task_t*)ike_delete_create(
|
||||||
|
this->ike_sa, FALSE);
|
||||||
default:
|
default:
|
||||||
break;
|
break;
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user