From 6894b33e6db857ee4fbf1ed0405a0a7ad95945b2 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 20 Jul 2026 16:30:39 +0200 Subject: [PATCH] child-create: Don't fail creating IKE SA if only Child SA installation fails Fixes: d7760416d62d ("child-create: Add support for multiple key exchanges") --- src/libcharon/sa/ikev2/tasks/child_create.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/libcharon/sa/ikev2/tasks/child_create.c b/src/libcharon/sa/ikev2/tasks/child_create.c index 13ea7be47..dbde6ff91 100644 --- a/src/libcharon/sa/ikev2/tasks/child_create.c +++ b/src/libcharon/sa/ikev2/tasks/child_create.c @@ -2226,13 +2226,13 @@ static bool key_exchange_done_and_install_r(private_child_create_t *this, case SUCCESS: break; case NOT_FOUND: - message->add_notify(message, TRUE, TS_UNACCEPTABLE, + message->add_notify(message, FALSE, TS_UNACCEPTABLE, chunk_empty); handle_child_sa_failure(this, message); return TRUE; case FAILED: default: - message->add_notify(message, TRUE, NO_PROPOSAL_CHOSEN, + message->add_notify(message, FALSE, NO_PROPOSAL_CHOSEN, chunk_empty); handle_child_sa_failure(this, message); return TRUE;