diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2015-06-10 15:53:08 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2015-08-20 16:05:02 +0200 |
| commit | 47a340e1f7fb2f6e05d7ca350969c4b4e0680cdf (patch) | |
| tree | 4f4e4e9118e29465da8faf2f6782479b3bccdac7 /src/libcharon/plugins/eap_tls/eap_tls.h | |
| parent | 47ee60177ee5ff0f555033a2582068978e69ed20 (diff) | |
| download | strongswan-47a340e1f7fb2f6e05d7ca350969c4b4e0680cdf.tar.bz2 strongswan-47a340e1f7fb2f6e05d7ca350969c4b4e0680cdf.tar.xz | |
ikev2: Drop IKE_SA_INIT messages that don't have the initiator flag set
While this doesn't really create any problems it is not 100% correct to
accept such messages because, of course, the sender of an IKE_SA_INIT
request is always the original initiator of an IKE_SA.
We currently don't check the flag later, so we wouldn't notice if the
peer doesn't set it in later messages (ike_sa_id_t.equals doesn't
compare it anymore since we added support for IKEv1, in particular since
17ec1c74de).
Diffstat (limited to 'src/libcharon/plugins/eap_tls/eap_tls.h')
0 files changed, 0 insertions, 0 deletions