Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL

diff --git a/src/charon/sa/tasks/child_rekey.c b/src/charon/sa/tasks/child_rekey.c
index b08e1a34d48ee64f40aeef5ad0153b5097354339..ff018d3f3d5252a0cbd2711972bcc7675f53579c 100644 (file)
--- a/src/charon/sa/tasks/child_rekey.c
+++ b/src/charon/sa/tasks/child_rekey.c
@@ -135,7 +135,9 @@ static status_t build_i(private_child_rekey_t *this, message_t *message)
                this->child_sa = this->ike_sa->get_child_sa(this->ike_sa, this->protocol,
                                                                                                        this->spi, FALSE);
                if (!this->child_sa)
-               {       /* CHILD_SA is gone, unable to rekey */
+               {       /* CHILD_SA is gone, unable to rekey. As an empty CREATE_CHILD_SA
+                        * exchange is invalid, we fall back to an INFORMATIONAL exchange.*/
+                       message->set_exchange_type(message, INFORMATIONAL);
                        return SUCCESS;
                }
                /* we work only with the inbound SPI */