ike-rekey: Reset IKE_SA on bus before sending CREATE_CHILD_SA response
Even when there is no error the CREATE_CHILD_SA response should be sent in the context of the existing IKE_SA.
This commit is contained in:
@@ -228,9 +228,10 @@ METHOD(task_t, build_r, status_t,
|
||||
|
||||
if (this->ike_init->task.build(&this->ike_init->task, message) == FAILED)
|
||||
{
|
||||
charon->bus->set_sa(charon->bus, this->ike_sa);
|
||||
return SUCCESS;
|
||||
}
|
||||
|
||||
charon->bus->set_sa(charon->bus, this->ike_sa);
|
||||
this->ike_sa->set_state(this->ike_sa, IKE_REKEYING);
|
||||
|
||||
/* rekeying successful, delete the IKE_SA using a subtask */
|
||||
|
||||
Reference in New Issue
Block a user