]> git.ipfire.org Git - thirdparty/strongswan.git/commit
ikev2: Return to the original host if connection fails after redirection
authorTobias Brunner <tobias@strongswan.org>
Tue, 19 May 2020 08:07:18 +0000 (10:07 +0200)
committerTobias Brunner <tobias@strongswan.org>
Tue, 19 May 2020 15:33:20 +0000 (17:33 +0200)
commit3a54206c0844e0b6410f61cca15ea783509d8b3e
treeaf59a6e598fce4882b1286e10771a7f6ac7c6edf
parent3f454f33c0f0dcb63b47c0b3e2bd5f9d66e7eafa
ikev2: Return to the original host if connection fails after redirection

If we fail connecting to the host we got redirected to, we should restart
with the original host where we might get redirected to a different host.

We must not reset this when retrying due to INVALID_KE_PAYLOAD or COOKIE
notifies.  Since we keep the initiator SPI in those cases, we use that
flag as indicator.

Since we don't store the original remote_host value, we can't restore
that.  So there is a potential conflict with MIPv6.

Closes strongswan/strongswan#171.
src/libcharon/sa/ike_sa.c