[Swan-commit] Changes to ref refs/heads/master
cagney at vault.libreswan.fi
Fri May 15 17:56:00 UTC 2020
Author: Andrew Cagney <cagney at gnu.org>
Date: Fri May 15 13:17:54 2020 -0400
ikev2: when invalid nonce, try to delete the ike family by returning STF_FATAL (not STF_FAIL)
Since v2N_INVALID_SYNTAX always immediately deletes the IKE family (no
further exchange is possible).
Should fix the responder, where a CREATE_CHILD_SA with a dud nonce wasn't
deleting the family.
(The initiator still only deletes the laval child)
More information about the Swan-commit