diff options
| author | Martin Willi <martin@revosec.ch> | 2013-05-17 10:22:00 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2013-06-11 15:54:26 +0200 |
| commit | eaafcec190ff05fb59ca3e91ed9e4d01aa532b41 (patch) | |
| tree | f2275604d95b93e57904cb9c379082c79a01c59d /src/libhydra/plugins/kernel_klips/kernel_klips_ipsec.c | |
| parent | 2788634c8cb68a02bf6729951a82fc14d2164a22 (diff) | |
| download | strongswan-eaafcec190ff05fb59ca3e91ed9e4d01aa532b41.tar.bz2 strongswan-eaafcec190ff05fb59ca3e91ed9e4d01aa532b41.tar.xz | |
ikev2: if responder authentication fails, send AUTHENTICATION_FAILED
According to RFC 5996, we MAY send an INFORMATIONAL message having an
AUTHENTICATION_FAILED. We don't do any retransmits, though, but just close
the IKE_SA after one message has been sent, avoiding the danger that an
unauthenticated IKE_SA stays alive.
Diffstat (limited to 'src/libhydra/plugins/kernel_klips/kernel_klips_ipsec.c')
0 files changed, 0 insertions, 0 deletions