]> git.ipfire.org Git - thirdparty/strongswan.git/commit
child-create: Properly handle DH group during migration when reestablishing
authorTobias Brunner <tobias@strongswan.org>
Wed, 1 Apr 2020 07:48:56 +0000 (09:48 +0200)
committerTobias Brunner <tobias@strongswan.org>
Thu, 7 May 2020 13:05:55 +0000 (15:05 +0200)
commit0184a69b7b14b91d13d30906b6e3da2ab155c608
tree27e4413316c5047d90b4446be419ad53342b6386
parent1665a4e0504f6bfbfa2ea617092cfff70c5b7049
child-create: Properly handle DH group during migration when reestablishing

If such a task was active while reestablishing it will get queued on the
new IKE_SA.  If the DH group is already set, the DH groups won't be
stripped from the proposals and a KE payload will be sent, which is invalid
during IKE_AUTH.  We don't want to reset the group if the task is part of a
child-rekey task.
src/libcharon/sa/ikev2/tasks/child_create.c