Reset the encrypted flag when handling IKE messages that contain a fragment

Racoon sets the encrypted bit for messages containing a fragment, but these
messages are not really encrypted (the fragmented message is though).

diff --git a/src/libcharon/encoding/message.c b/src/libcharon/encoding/message.c
index 55e9f33fc1b770524a6f4fbd882b217c57ad5c94..c0f468663575d7f87126bf75a7fbbbc4c598252a 100644 (file)
--- a/src/libcharon/encoding/message.c
+++ b/src/libcharon/encoding/message.c
@@ -1693,6 +1693,12 @@ METHOD(message_t, parse_header, status_t,
        }
        this->first_payload = ike_header->payload_interface.get_next_type(
                                                                                                &ike_header->payload_interface);
+       if (this->first_payload == FRAGMENT_V1 && this->is_encrypted)
+       {       /* racoon sets the encryted bit when sending a fragment, but these
+                * messages are really not encrypted */
+               this->is_encrypted = FALSE;
+       }
+
        for (i = 0; i < countof(this->reserved); i++)
        {
                reserved = payload_get_field(&ike_header->payload_interface,