denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev1: Don't handle DPD timeout job if IKE_SA got passive

Browse Source 
While a passively installed IKE_SA does not queue a DPD timeout job, one that
switches from active to passive might execute it. Ignore such a queued job if
the IKE_SA is in passive state.
This commit is contained in:
Martin Willi
2015-03-10 14:02:22 +01:00
parent 2b0f34a2ef
commit eb3e339a3c
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/processing/jobs/dpd_timeout_job.c
+6
View File
@@ -63,6 +63,12 @@ METHOD(job_t, execute, job_requeue_t,
this->ike_sa_id); this->ike_sa_id);
if (ike_sa) if (ike_sa)
{ {
if (ike_sa->get_state(ike_sa) == IKE_PASSIVE)
{
charon->ike_sa_manager->checkin(charon->ike_sa_manager, ike_sa);
return JOB_REQUEUE_NONE;
}
use_time = ike_sa->get_statistic(ike_sa, STAT_INBOUND); use_time = ike_sa->get_statistic(ike_sa, STAT_INBOUND);
enumerator = ike_sa->create_child_sa_enumerator(ike_sa); enumerator = ike_sa->create_child_sa_enumerator(ike_sa);