ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity

ikev1: Don't inherit children if INITITAL_CONTACT was seen 

Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
This commit is contained in:
Thomas Egerer 2014-10-09 11:15:07 +02:00 committed by Martin Willi
parent 11b42933bf
commit 1201ddcbc5
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/libcharon/sa/ike_sa_manager.c
View File

@ -1783,7 +1783,10 @@ static status_t enforce_replace(private_ike_sa_manager_t *this,
if (is_ikev1_reauth(duplicate, host))
{
/* looks like a reauthentication attempt */
adopt_children(duplicate, new);
if (!new->has_condition(new, COND_INIT_CONTACT_SEEN))
{
adopt_children(duplicate, new);
}
/* For IKEv1 we have to delay the delete for the old IKE_SA. Some
* peers need to complete the new SA first, otherwise the quick modes
* might get lost. */