denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev1: Trigger down events for CHILD_SAs if reauthentication failed due to retransmits

Browse Source
This commit is contained in:
Tobias Brunner
2018-04-12 15:17:24 +02:00
parent ebc6defa05
commit eb82210620
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ike_sa.c
+16
View File
@@ -2350,11 +2350,27 @@ METHOD(ike_sa_t, retransmit, status_t,
if (this->version == IKEV1 && array_count(this->child_sas)) if (this->version == IKEV1 && array_count(this->child_sas))
{ {
enumerator_t *enumerator;
child_sa_t *child_sa;
/* if reauthenticating an IKEv1 SA failed (assumed for an SA /* if reauthenticating an IKEv1 SA failed (assumed for an SA
* in this state with CHILD_SAs), try again from scratch */ * in this state with CHILD_SAs), try again from scratch */
DBG1(DBG_IKE, "reauthentication failed, trying to " DBG1(DBG_IKE, "reauthentication failed, trying to "
"reestablish IKE_SA"); "reestablish IKE_SA");
reestablish(this); reestablish(this);
/* trigger down events for the CHILD_SAs, as no down event
* is triggered below for IKE SAs in this state */
enumerator = array_create_enumerator(this->child_sas);
while (enumerator->enumerate(enumerator, &child_sa))
{
if (child_sa->get_state(child_sa) != CHILD_REKEYED &&
child_sa->get_state(child_sa) != CHILD_DELETED)
{
charon->bus->child_updown(charon->bus, child_sa,
FALSE);
}
}
enumerator->destroy(enumerator);
} }
break; break;
} }