denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev1: Fix handling of UNITY_LOAD_BALANCE

Browse Source 
The re-authentication is now handled within the original IKE_SA if it has not
yet been established, so we don't want to destroy it.
This commit is contained in:
Tobias Brunner
2014-10-07 13:46:18 +02:00
parent d4828f51e0
commit d52b8738b5
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev1/tasks/informational.c
+3 -3
View File
@@ -112,16 +112,16 @@ METHOD(task_t, process_r, status_t,
IKEV2_UDP_PORT); IKEV2_UDP_PORT);
if (redirect) if (redirect)
{ /* treat the redirect as reauthentication */ { /* treat the redirect as reauthentication */
DBG1(DBG_IKE, "received %N notify. redirected to %H", DBG1(DBG_IKE, "received %N notify, redirected to %H",
notify_type_names, type, redirect); notify_type_names, type, redirect);
/* Cisco boxes reject the first message from 4500 */ /* Cisco boxes reject the first message from 4500 */
me = this->ike_sa->get_my_host(this->ike_sa); me = this->ike_sa->get_my_host(this->ike_sa);
me->set_port(me, charon->socket->get_port( me->set_port(me, charon->socket->get_port(
charon->socket, FALSE)); charon->socket, FALSE));
this->ike_sa->set_other_host(this->ike_sa, redirect); this->ike_sa->set_other_host(this->ike_sa, redirect);
this->ike_sa->reauth(this->ike_sa); status = this->ike_sa->reauth(this->ike_sa);
enumerator->destroy(enumerator); enumerator->destroy(enumerator);
return DESTROY_ME; return status;
} }
else else
{ {