From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 15 Jun 2026 14:51:46 +0000 (+0200)
Subject: pt-tls-server: Properly fail if processing PB-TNC batches failed
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dbaca2dffece61dc76903dc4ff410ae01eca13c1;p=thirdparty%2Fstrongswan.git

pt-tls-server: Properly fail if processing PB-TNC batches failed

Because `assess()` returns a `status_t`, `FALSE` is interpreted as
`SUCCESS`. So a failure while processing PB-TNC batches terminated
the process successfully.

Fixes: 1e92d5f1145d ("Process PB-TNC batches received via PT-TLS asynchronously")
---

diff --git a/src/libpttls/pt_tls_server.c b/src/libpttls/pt_tls_server.c
index 906b145020..8e4185007e 100644
--- a/src/libpttls/pt_tls_server.c
+++ b/src/libpttls/pt_tls_server.c
@@ -439,7 +439,7 @@ static status_t assess(private_pt_tls_server_t *this, tls_t *tnccs)
 			case FAILED:
 			default:
 				reader->destroy(reader);
-				return FALSE;
+				return FAILED;
 			case NEED_MORE:
 				break;
 		}