From 72e2faf291f9866d27bf8b07c40f01dd7bb9434d Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Thu, 3 Sep 2009 17:32:41 +0200 Subject: Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL --- src/charon/sa/tasks/child_rekey.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/charon/sa/tasks/child_rekey.c b/src/charon/sa/tasks/child_rekey.c index b08e1a34d..ff018d3f3 100644 --- a/src/charon/sa/tasks/child_rekey.c +++ b/src/charon/sa/tasks/child_rekey.c @@ -135,7 +135,9 @@ static status_t build_i(private_child_rekey_t *this, message_t *message) this->child_sa = this->ike_sa->get_child_sa(this->ike_sa, this->protocol, this->spi, FALSE); if (!this->child_sa) - { /* CHILD_SA is gone, unable to rekey */ + { /* CHILD_SA is gone, unable to rekey. As an empty CREATE_CHILD_SA + * exchange is invalid, we fall back to an INFORMATIONAL exchange.*/ + message->set_exchange_type(message, INFORMATIONAL); return SUCCESS; } /* we work only with the inbound SPI */ -- cgit v1.2.3