ike-rekey: Respond with TEMPORARY_FAILURE if we are deleting the SA

diff --git a/src/libcharon/sa/ikev2/tasks/ike_rekey.c b/src/libcharon/sa/ikev2/tasks/ike_rekey.c
index 334749a61ab8dc4b6645b6aeb7229d071a574ece..9373e96431a76858fc6491afc332ad0298dc909b 100644 (file)
--- a/src/libcharon/sa/ikev2/tasks/ike_rekey.c
+++ b/src/libcharon/sa/ikev2/tasks/ike_rekey.c
@@ -208,6 +208,11 @@ METHOD(task_t, process_r, status_t,
 METHOD(task_t, build_r, status_t,
        private_ike_rekey_t *this, message_t *message)
 {
+       if (this->ike_sa->get_state(this->ike_sa) == IKE_DELETING)
+       {
+               message->add_notify(message, TRUE, TEMPORARY_FAILURE, chunk_empty);
+               return SUCCESS;
+       }
        if (this->new_sa == NULL)
        {
                /* IKE_SA/a CHILD_SA is in an inacceptable state, deny rekeying */