child-create: Don't fail creating IKE SA if only Child SA installation fails

Fixes: d7760416d6 ("child-create: Add support for multiple key exchanges")
This commit is contained in:
Tobias Brunner
2026-07-21 10:21:51 +02:00
parent 8cd4ac9f53
commit 6894b33e6d
+2 -2
View File
@@ -2226,13 +2226,13 @@ static bool key_exchange_done_and_install_r(private_child_create_t *this,
case SUCCESS:
break;
case NOT_FOUND:
message->add_notify(message, TRUE, TS_UNACCEPTABLE,
message->add_notify(message, FALSE, TS_UNACCEPTABLE,
chunk_empty);
handle_child_sa_failure(this, message);
return TRUE;
case FAILED:
default:
message->add_notify(message, TRUE, NO_PROPOSAL_CHOSEN,
message->add_notify(message, FALSE, NO_PROPOSAL_CHOSEN,
chunk_empty);
handle_child_sa_failure(this, message);
return TRUE;