denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev1: Reestablish SAs if reauthentication failed due to retransmits

Browse Source
This commit is contained in:
Tobias Brunner
2018-04-12 15:17:24 +02:00
parent a36d8097ed
commit ebc6defa05
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ike_sa.c
+9
View File
@@ -2347,6 +2347,15 @@ METHOD(ike_sa_t, retransmit, status_t,
return this->task_manager->initiate(this->task_manager); return this->task_manager->initiate(this->task_manager);
} }
DBG1(DBG_IKE, "establishing IKE_SA failed, peer not responding"); DBG1(DBG_IKE, "establishing IKE_SA failed, peer not responding");
if (this->version == IKEV1 && array_count(this->child_sas))
{
/* if reauthenticating an IKEv1 SA failed (assumed for an SA
* in this state with CHILD_SAs), try again from scratch */
DBG1(DBG_IKE, "reauthentication failed, trying to "
"reestablish IKE_SA");
reestablish(this);
}
break; break;
} }
case IKE_DELETING: case IKE_DELETING: