Don't send CERTREQs when initiating aggressive mode PSK

diff --git a/src/libcharon/sa/ikev1/tasks/isakmp_cert_pre.c b/src/libcharon/sa/ikev1/tasks/isakmp_cert_pre.c
index 8ba5a2aa7db3269a5b436956fafcab6157a77508..ea5da4ebc6ebd029c03d4434225efecefeb7aa57 100644 (file)
--- a/src/libcharon/sa/ikev1/tasks/isakmp_cert_pre.c
+++ b/src/libcharon/sa/ikev1/tasks/isakmp_cert_pre.c
@@ -349,6 +349,10 @@ METHOD(task_t, build_i, status_t,
                case AGGRESSIVE:
                        if (this->state == CR_SA)
                        {
+                               if (!use_certs(this, message))
+                               {
+                                       return SUCCESS;
+                               }
                                build_certreqs(this, message);
                        }
                        return NEED_MORE;