aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2015-09-28 17:37:42 +0200
committerTobias Brunner <tobias@strongswan.org>2015-10-30 10:30:30 +0100
commit1c8dfa30d01875f1df43aff6db75f3e188829b4f (patch)
treeaa659abdb923497370135e86393c34c3908d882b
parent3805880c8aa015b3cdbfcdac82dd4b9049317e9b (diff)
downloadstrongswan-1c8dfa30d01875f1df43aff6db75f3e188829b4f.tar.bz2
strongswan-1c8dfa30d01875f1df43aff6db75f3e188829b4f.tar.xz
ikev1: Queue INFORMATIONAL request if AM is not complete yet
-rw-r--r--src/libcharon/sa/ikev1/task_manager_v1.c19
1 files changed, 13 insertions, 6 deletions
diff --git a/src/libcharon/sa/ikev1/task_manager_v1.c b/src/libcharon/sa/ikev1/task_manager_v1.c
index a027b749e..5b0438ffa 100644
--- a/src/libcharon/sa/ikev1/task_manager_v1.c
+++ b/src/libcharon/sa/ikev1/task_manager_v1.c
@@ -1387,13 +1387,20 @@ METHOD(task_manager_t, process_message, status_t,
}
/* drop XAuth/Mode Config/Quick Mode messages until we received the last
- * Aggressive Mode message */
- if (have_aggressive_mode_task(this) &&
- msg->get_exchange_type(msg) != AGGRESSIVE)
+ * Aggressive Mode message. since Informational messages are not
+ * retransmitted we queue them. */
+ if (have_aggressive_mode_task(this))
{
- DBG1(DBG_IKE, "ignoring %N request while phase 1 is incomplete",
- exchange_type_names, msg->get_exchange_type(msg));
- return FAILED;
+ if (msg->get_exchange_type(msg) == INFORMATIONAL_V1)
+ {
+ return queue_message(this, msg);
+ }
+ else if (msg->get_exchange_type(msg) != AGGRESSIVE)
+ {
+ DBG1(DBG_IKE, "ignoring %N request while phase 1 is incomplete",
+ exchange_type_names, msg->get_exchange_type(msg));
+ return FAILED;
+ }
}
/* queue XAuth/Mode Config messages unless the Main Mode exchange we