Raise an alert if IKE SA is kept

This alert is raised when the establishment of a child SA fails but the
IKE SA is kept.

diff --git a/src/libcharon/bus/bus.h b/src/libcharon/bus/bus.h
index 34b9bc3fea296ef496fae1821470a9c3a68d52f8..105375ae4863430518e86667f9368d0919d50e13 100644 (file)
--- a/src/libcharon/bus/bus.h
+++ b/src/libcharon/bus/bus.h
@@ -124,6 +124,8 @@ enum alert_t {
        ALERT_UNIQUE_REPLACE,
        /** IKE_SA deleted because of "keep" unique policy, no arguement */
        ALERT_UNIQUE_KEEP,
+       /** IKE_SA kept on failed child SA establishment, no argument */
+       ALERT_KEEP_ON_CHILD_SA_FAILURE,
        /** allocating virtual IP failed, linked_list_t of host_t requested */
        ALERT_VIP_FAILURE,
        /** an authorize() hook failed, no argument */

diff --git a/src/libcharon/sa/ikev2/tasks/child_create.c b/src/libcharon/sa/ikev2/tasks/child_create.c
index c59b4d646f7eb1fba5ac0381aa9c6558250a2e55..787c51eb28d2eb25731ec7ed455edab4908a011b 100644 (file)
--- a/src/libcharon/sa/ikev2/tasks/child_create.c
+++ b/src/libcharon/sa/ikev2/tasks/child_create.c
@@ -989,6 +989,7 @@ static void handle_child_sa_failure(private_child_create_t *this,
        else
        {
                DBG1(DBG_IKE, "failed to establish CHILD_SA, keeping IKE_SA");
+               charon->bus->alert(charon->bus, ALERT_KEEP_ON_CHILD_SA_FAILURE);
        }
 }