[Swan-dev] how pluto handling AUTH error notifications

Paul Wouters paul at nohats.ca
Tue Mar 20 16:39:18 UTC 2018


On Tue, 20 Mar 2018, Andrew Cagney wrote:

> Here, the responder accepted the AUTH request but rejected the
> attached CHILD SA request (hopefully it still replied with its own
> AUTH credentials, I'm not sure, but if we're deleting the IKE SA it
> isn't critical).

It should keep the IKE SA and return NO_PROPOSAL_CHOSEN ?

And delete any child sa state if it had already created it (but prob
not)

Paul


More information about the Swan-dev mailing list