ikev1: Inverse check when applying received KE value during Quick Mode

Fixes Quick Mode negotiation when PFS is in use.

diff --git a/src/libcharon/sa/ikev1/tasks/quick_mode.c b/src/libcharon/sa/ikev1/tasks/quick_mode.c
index b48ace4cabd4597753bf67fbbd551b78522aaab3..982c1285140a64d41c0c040bdcd5880b62eaf49f 100644 (file)
--- a/src/libcharon/sa/ikev1/tasks/quick_mode.c
+++ b/src/libcharon/sa/ikev1/tasks/quick_mode.c
@@ -493,7 +493,7 @@ static bool get_ke(private_quick_mode_t *this, message_t *message)
                DBG1(DBG_IKE, "KE payload missing");
                return FALSE;
        }
-       if (this->dh->set_other_public_value(this->dh,
+       if (!this->dh->set_other_public_value(this->dh,
                                                                ke_payload->get_key_exchange_data(ke_payload)))
        {
                DBG1(DBG_IKE, "unable to apply received KE value");