child-create: Don't consider a DH group mismatch as failure as responder
This causes problems e.g. on Android where we handle the alert (and reestablish the IKE_SA) even though it usually is no problem if the peer retries with the requested group. We don't consider it as a failure on the initiator either.
This commit is contained in:
@@ -1377,7 +1377,6 @@ METHOD(task_t, build_r, status_t,
|
||||
uint16_t group = htons(this->dh_group);
|
||||
message->add_notify(message, FALSE, INVALID_KE_PAYLOAD,
|
||||
chunk_from_thing(group));
|
||||
handle_child_sa_failure(this, message);
|
||||
return SUCCESS;
|
||||
}
|
||||
case FAILED:
|
||||
|
||||
Reference in New Issue
Block a user