encoding: Don't verify length of IKEv1 KE payloads

The verification introduced with 84738b1aed95 ("encoding: Verify the length
of KE payload data for known groups") can't be done for IKEv1 as the KE
payload does not contain the DH group.

diff --git a/src/libcharon/encoding/payloads/ke_payload.c b/src/libcharon/encoding/payloads/ke_payload.c
index 644b5b6f9112a0e62f40bfe8c0aa2386b626c28b..7f3c4e400af513be2fb0399495a9603abe11369c 100644 (file)
--- a/src/libcharon/encoding/payloads/ke_payload.c
+++ b/src/libcharon/encoding/payloads/ke_payload.c
@@ -146,6 +146,12 @@ METHOD(payload_t, verify, status_t,
        diffie_hellman_group_t g = this->dh_group_number;
        bool valid = TRUE;
 
+       if (this->type == PLV1_KEY_EXCHANGE)
+       {
+               /* IKEv1 does not transmit the group */
+               return SUCCESS;
+       }
+
        switch (g)
        {
                case MODP_NONE: