ha: Destroy synced IKE_SA if no configuration is found during update

2015-03-10 15:08:58 +01:00 · 2015-03-10 15:08:58 +01:00 · 438318c6c3
parent eb3e339a3c
commit 438318c6c3
1 changed files with 3 additions and 0 deletions
--- a/src/libcharon/plugins/ha/ha_dispatcher.c
+++ b/src/libcharon/plugins/ha/ha_dispatcher.c
@ -373,6 +373,9 @@ static void process_ike_update(private_ha_dispatcher_t *this,
 				else
 				{
 					DBG1(DBG_IKE, "HA is missing nodes peer configuration");
+					charon->ike_sa_manager->checkin_and_destroy(
+												charon->ike_sa_manager, ike_sa);
+					ike_sa = NULL;
 				}
 				break;
 			case HA_EXTENSIONS: