Nathan Tran 543a4c86f9 ikev2: Handle INVALID_SYNTAX after IKE_AUTH by deleting IKE_SA ...

When serving as a responder and receiving an INFORMATIONAL exchange
containing INVALID_SYNTAX after IKE_AUTH, the IKE_SA should be deleted.
Currently, it only gets deleted after receiving AUTHENTICATION_FAILED.
RFC7296 section 2.21.2 says:

 In an IKE_AUTH exchange, or in the INFORMATIONAL exchange immediately
 following it (in case an error happened when processing a response to
 IKE_AUTH), the UNSUPPORTED_CRITICAL_PAYLOAD, INVALID_SYNTAX, and
 AUTHENTICATION_FAILED notifications are the only ones to cause the
 IKE SA to be deleted or not created, without a Delete payload.

Closes strongswan/strongswan#2636

2025-01-29 17:31:40 +01:00

..

eap

eap: Use pen_t instead of uint32_t for vendor ID

2022-09-21 13:53:44 +02:00

ikev1

quick-mode: Allow "aborting" task if it's currently active

2024-09-18 11:53:17 +02:00

ikev2

ikev2: Handle INVALID_SYNTAX after IKE_AUTH by deleting IKE_SA

2025-01-29 17:31:40 +01:00

xauth

Update copyright headers after acquisition by secunet

2022-06-28 10:22:56 +02:00

authenticator.c

Rename diffie_hellman_t to key_exchange_t and change the interface etc.

2022-06-29 10:28:50 +02:00

authenticator.h

authenticator: Add optional method to set IntAuth data

2024-08-07 16:20:18 +02:00

child_sa_manager.c

Update copyright headers after acquisition by secunet

2022-06-28 10:22:56 +02:00

child_sa_manager.h

Update copyright headers after acquisition by secunet

2022-06-28 10:22:56 +02:00

child_sa.c

child-sa: Update status flags based on success of SA addition

2024-11-29 13:46:12 +01:00

child_sa.h

ikev2: Make CHILD_SAs properly trackable during rekey collisions

2024-08-07 16:20:19 +02:00

ike_sa_id.c

Update copyright headers after acquisition by secunet

2022-06-28 10:22:56 +02:00

ike_sa_id.h

Update copyright headers after acquisition by secunet

2022-06-28 10:22:56 +02:00

ike_sa_manager.c

ike-sa-manager: Avoid initiating CHILD_SAs on IKE_SAs with queued DELETE

2024-07-26 11:34:44 +02:00

ike_sa_manager.h

Update copyright headers after acquisition by secunet

2022-06-28 10:22:56 +02:00

ike_sa.c

ike-sa: Add address family specific configuration of fragment size

2024-08-07 14:19:41 +02:00

ike_sa.h

ike-init: Indicate support for IKE_INTERMEDIATE

2024-08-07 16:20:19 +02:00

keymat.c

Update copyright headers after acquisition by secunet

2022-06-28 10:22:56 +02:00

keymat.h

Rename diffie_hellman_t to key_exchange_t and change the interface etc.

2022-06-29 10:28:50 +02:00

redirect_manager.c

Update copyright headers after acquisition by secunet

2022-06-28 10:22:56 +02:00

redirect_manager.h

doxygen: Fix syntax for some output parameters

2023-05-04 16:35:47 +02:00

redirect_provider.h

doxygen: Fix syntax for some output parameters

2023-05-04 16:35:47 +02:00

shunt_manager.c

shunt-manager: Pass HW offload mode when installing policies

2023-02-16 13:25:34 +01:00

shunt_manager.h

Update copyright headers after acquisition by secunet

2022-06-28 10:22:56 +02:00

task_manager.c

ike: Use a struct to store retransmission settings

2023-05-17 15:58:28 +02:00

task_manager.h

Fixed some typos, courtesy of codespell

2023-06-02 10:36:47 +02:00

task.c

ikev2: Trigger ike_updown() event after all IKE-specific tasks ran

2022-09-23 16:28:35 +02:00

task.h

ikev2: Trigger ike_updown() event after all IKE-specific tasks ran

2022-09-23 16:28:35 +02:00

trap_manager.c

trap-manager: Maintain allocated reqids when handling acquires

2023-11-13 12:02:11 +01:00

trap_manager.h

Update copyright headers after acquisition by secunet

2022-06-28 10:22:56 +02:00