ikev1: Fix handling of UNITY_LOAD_BALANCE

The re-authentication is now handled within the original IKE_SA if it has not
yet been established, so we don't want to destroy it.

diff --git a/src/libcharon/sa/ikev1/tasks/informational.c b/src/libcharon/sa/ikev1/tasks/informational.c
index b742dbef9c66afde5be60b57de350253df722e61..2798978b25d519e84d3dc89d44bbf7782de9d39d 100644 (file)
--- a/src/libcharon/sa/ikev1/tasks/informational.c
+++ b/src/libcharon/sa/ikev1/tasks/informational.c
@@ -112,16 +112,16 @@ METHOD(task_t, process_r, status_t,
                                                                                                          IKEV2_UDP_PORT);
                                        if (redirect)
                                        {       /* treat the redirect as reauthentication */
-                                               DBG1(DBG_IKE, "received %N notify. redirected to %H",
+                                               DBG1(DBG_IKE, "received %N notify, redirected to %H",
                                                         notify_type_names, type, redirect);
                                                /* Cisco boxes reject the first message from 4500 */
                                                me = this->ike_sa->get_my_host(this->ike_sa);
                                                me->set_port(me, charon->socket->get_port(
                                                                                                                charon->socket, FALSE));
                                                this->ike_sa->set_other_host(this->ike_sa, redirect);
-                                               this->ike_sa->reauth(this->ike_sa);
+                                               status = this->ike_sa->reauth(this->ike_sa);
                                                enumerator->destroy(enumerator);
-                                               return DESTROY_ME;
+                                               return status;
                                        }
                                        else
                                        {