denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

child-create: Don't consider a DH group mismatch as failure as responder

Browse Source 
This causes problems e.g. on Android where we handle the alert (and
reestablish the IKE_SA) even though it usually is no problem if the
peer retries with the requested group.  We don't consider it as a
failure on the initiator either.
This commit is contained in:
Tobias Brunner
2017-09-18 10:51:39 +02:00
parent 6e861947a0
commit e7276f78aa
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev2/tasks/child_create.c
-1
View File
@@ -1377,7 +1377,6 @@ METHOD(task_t, build_r, status_t,
uint16_t group = htons(this->dh_group); uint16_t group = htons(this->dh_group);
message->add_notify(message, FALSE, INVALID_KE_PAYLOAD, message->add_notify(message, FALSE, INVALID_KE_PAYLOAD,
chunk_from_thing(group)); chunk_from_thing(group));
handle_child_sa_failure(this, message);
return SUCCESS; return SUCCESS;
} }
case FAILED: case FAILED: