ikev1: Ignore roam events for IKEv1

We don't have MOBIKE and the fallback to reauthentication does also not
make much sense as that doesn't affect the CHILD_SAs for IKEv1.  So
instead of complicating the code we just ignore roam events for IKEv1
for now.

Closes strongswan/strongswan#100.

diff --git a/src/libcharon/sa/ike_sa.c b/src/libcharon/sa/ike_sa.c
index 349e2224762ff53af449bb2a044306a502ef6a74..18d1c24410a7e8c20bd37a4d69830e49dcd518c9 100644 (file)
--- a/src/libcharon/sa/ike_sa.c
+++ b/src/libcharon/sa/ike_sa.c
@@ -2582,10 +2582,15 @@ METHOD(ike_sa_t, roam, status_t,
                 * without config assigned */
                return SUCCESS;
        }
+       if (this->version == IKEV1)
+       {       /* ignore roam events for IKEv1 where we don't have MOBIKE and would
+                * have to reestablish from scratch (reauth is not enough) */
+               return SUCCESS;
+       }
 
        /* ignore roam events if MOBIKE is not supported/enabled and the local
         * address is statically configured */
-       if (this->version == IKEV2 && !supports_extension(this, EXT_MOBIKE) &&
+       if (!supports_extension(this, EXT_MOBIKE) &&
                ike_cfg_has_address(this->ike_cfg, this->my_host, TRUE))
        {
                DBG2(DBG_IKE, "keeping statically configured path %H - %H",