ikev1: Log traffic selectors for missing child configs

Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>

diff --git a/src/libcharon/sa/ikev1/tasks/quick_mode.c b/src/libcharon/sa/ikev1/tasks/quick_mode.c
index 007e94d96866b948a3497477b8dd5dcda235b488..b0a42b8bd0ae0398e21b1dcb74a16824e396993a 100644 (file)
--- a/src/libcharon/sa/ikev1/tasks/quick_mode.c
+++ b/src/libcharon/sa/ikev1/tasks/quick_mode.c
@@ -1110,14 +1110,17 @@ METHOD(task_t, process_r, status_t,
                                this->tsi = select_ts(this, FALSE, tsi);
                                this->tsr = select_ts(this, TRUE, tsr);
                        }
-                       tsi->destroy_offset(tsi, offsetof(traffic_selector_t, destroy));
-                       tsr->destroy_offset(tsr, offsetof(traffic_selector_t, destroy));
                        if (!this->config || !this->tsi || !this->tsr ||
                                this->mode != this->config->get_mode(this->config))
                        {
-                               DBG1(DBG_IKE, "no matching CHILD_SA config found");
+                               DBG1(DBG_IKE, "no matching CHILD_SA config found for "
+                                        "%#R === %#R", tsi, tsr);
+                               tsi->destroy_offset(tsi, offsetof(traffic_selector_t, destroy));
+                               tsr->destroy_offset(tsr, offsetof(traffic_selector_t, destroy));
                                return send_notify(this, INVALID_ID_INFORMATION);
                        }
+                       tsi->destroy_offset(tsi, offsetof(traffic_selector_t, destroy));
+                       tsr->destroy_offset(tsr, offsetof(traffic_selector_t, destroy));
 
                        if (this->config->has_option(this->config, OPT_IPCOMP))
                        {