ikev1: Reestablish SAs if reauthentication failed due to retransmits

This commit is contained in:
Tobias Brunner 2018-03-01 17:53:59 +01:00
parent a36d8097ed
commit ebc6defa05
1 changed files with 9 additions and 0 deletions

View File

@ -2347,6 +2347,15 @@ METHOD(ike_sa_t, retransmit, status_t,
return this->task_manager->initiate(this->task_manager);
}
DBG1(DBG_IKE, "establishing IKE_SA failed, peer not responding");
if (this->version == IKEV1 && array_count(this->child_sas))
{
/* if reauthenticating an IKEv1 SA failed (assumed for an SA
* in this state with CHILD_SAs), try again from scratch */
DBG1(DBG_IKE, "reauthentication failed, trying to "
"reestablish IKE_SA");
reestablish(this);
}
break;
}
case IKE_DELETING: