From e7099aa24effb0b88f1667953daba7f917655afe Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Wed, 10 Nov 2010 16:30:25 +0100
Subject: Handle all error notifies in CREATE_CHILD_SA exchanges

---
 src/libcharon/sa/tasks/child_create.c | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

(limited to 'src/libcharon/sa')

diff --git a/src/libcharon/sa/tasks/child_create.c b/src/libcharon/sa/tasks/child_create.c
index f971f8859..02831b004 100644
--- a/src/libcharon/sa/tasks/child_create.c
+++ b/src/libcharon/sa/tasks/child_create.c
@@ -1110,7 +1110,21 @@ METHOD(task_t, process_i, status_t,
 					return NEED_MORE;
 				}
 				default:
+				{
+					if (message->get_exchange_type(message) == CREATE_CHILD_SA)
+					{	/* handle notifies if not handled in IKE_AUTH */
+						if (type <= 16383)
+						{
+							DBG1(DBG_IKE, "received %N notify error",
+								 notify_type_names, type);
+							enumerator->destroy(enumerator);
+							return SUCCESS;
+						}
+						DBG2(DBG_IKE, "received %N notify",
+							 notify_type_names, type);
+					}
 					break;
+				}
 			}
 		}
 	}
-- 
cgit v1.2.3