denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev2: raise LOCAL_AUTH_FAILED when receiving INFORMATIONAL with AUTH_FAILED

Browse Source
This commit is contained in:
Martin Willi
2013-06-11 15:54:26 +02:00
parent ca74bf7a06
commit ff3fff4dc9
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev2/tasks/ike_delete.c
+8
View File
@@ -109,6 +109,14 @@ METHOD(task_t, process_r, status_t,
this->ike_sa->get_other_host(this->ike_sa), this->ike_sa->get_other_host(this->ike_sa),
this->ike_sa->get_other_id(this->ike_sa)); this->ike_sa->get_other_id(this->ike_sa));
if (message->get_exchange_type(message) == INFORMATIONAL &&
message->get_notify(message, AUTHENTICATION_FAILED))
{
/* a late AUTHENTICATION_FAILED notify from the initiator after
* we have established the IKE_SA: signal auth failure */
charon->bus->alert(charon->bus, ALERT_LOCAL_AUTH_FAILED);
}
switch (this->ike_sa->get_state(this->ike_sa)) switch (this->ike_sa->get_state(this->ike_sa))
{ {
case IKE_ESTABLISHED: case IKE_ESTABLISHED: