ikev1: Queue INFORMATIONAL request if AM is not complete yet

diff --git a/src/libcharon/sa/ikev1/task_manager_v1.c b/src/libcharon/sa/ikev1/task_manager_v1.c
index a027b749e72eeb499593ffcf59aab7942e58b631..5b0438ffa2a2795434cc0504fb93a4af6c0fd78d 100644 (file)
--- a/src/libcharon/sa/ikev1/task_manager_v1.c
+++ b/src/libcharon/sa/ikev1/task_manager_v1.c
@@ -1387,13 +1387,20 @@ METHOD(task_manager_t, process_message, status_t,
                }
 
                /* drop XAuth/Mode Config/Quick Mode messages until we received the last
-                * Aggressive Mode message */
-               if (have_aggressive_mode_task(this) &&
-                       msg->get_exchange_type(msg) != AGGRESSIVE)
+                * Aggressive Mode message.  since Informational messages are not
+                * retransmitted we queue them. */
+               if (have_aggressive_mode_task(this))
                {
-                       DBG1(DBG_IKE, "ignoring %N request while phase 1 is incomplete",
-                                exchange_type_names, msg->get_exchange_type(msg));
-                       return FAILED;
+                       if (msg->get_exchange_type(msg) == INFORMATIONAL_V1)
+                       {
+                               return queue_message(this, msg);
+                       }
+                       else if (msg->get_exchange_type(msg) != AGGRESSIVE)
+                       {
+                               DBG1(DBG_IKE, "ignoring %N request while phase 1 is incomplete",
+                                        exchange_type_names, msg->get_exchange_type(msg));
+                               return FAILED;
+                       }
                }
 
                /* queue XAuth/Mode Config messages unless the Main Mode exchange we