From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 12 Dec 2011 17:38:32 +0000 (+0100)
Subject: Destroy IKE_SA after failed XAuth authentication.
X-Git-Tag: 5.0.0~338^2~9^2~258
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4dbd81c66959dbb78485941e3ab9705c5b05776c;p=thirdparty%2Fstrongswan.git

Destroy IKE_SA after failed XAuth authentication.
---

diff --git a/src/libcharon/sa/tasks/xauth.c b/src/libcharon/sa/tasks/xauth.c
index de93935a9a..4fd896e3cc 100644
--- a/src/libcharon/sa/tasks/xauth.c
+++ b/src/libcharon/sa/tasks/xauth.c
@@ -277,9 +277,12 @@ METHOD(task_t, process_i_status, status_t,
 		DBG1(DBG_IKE, "received invalid XAUTH status response");
 		return FAILED;
 	}
-
+	if (this->status != XAUTH_OK)
+	{
+		DBG1(DBG_IKE, "destroying IKE_SA after failed XAuth authentication");
+		return FAILED;
+	}
 	establish(this);
-
 	return SUCCESS;
 }