summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorHans-Joerg Hoexer <hshoexer@cvs.openbsd.org>2008-11-11 15:11:29 +0000
committerHans-Joerg Hoexer <hshoexer@cvs.openbsd.org>2008-11-11 15:11:29 +0000
commitdacc424ffc7fab4dad00b1fd38e0ef914eddf187 (patch)
treeef561dd82e3e2e5bb717b0255e1209b7104edcfd
parent6dfc7596a14514e9a18680b9da1e23bb00afe957 (diff)
Use rfc2409 conform notification message when client identities are
not valid during phase 2. From Dirk Mast <condor2k at googlemail dot com>, thanks! ok markus@
-rw-r--r--sbin/isakmpd/ike_quick_mode.c5
1 files changed, 3 insertions, 2 deletions
diff --git a/sbin/isakmpd/ike_quick_mode.c b/sbin/isakmpd/ike_quick_mode.c
index cf075f61867..b9315dc93e5 100644
--- a/sbin/isakmpd/ike_quick_mode.c
+++ b/sbin/isakmpd/ike_quick_mode.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ike_quick_mode.c,v 1.101 2007/08/15 21:05:45 hshoexer Exp $ */
+/* $OpenBSD: ike_quick_mode.c,v 1.102 2008/11/11 15:11:28 hshoexer Exp $ */
/* $EOM: ike_quick_mode.c,v 1.139 2001/01/26 10:43:17 niklas Exp $ */
/*
@@ -1699,7 +1699,8 @@ next_sa:
(exchange->doi->decode_ids("initiator id %s, responder"
" id %s", ie->id_ci, ie->id_ci_sz, ie->id_cr,
ie->id_cr_sz, 1)));
- message_drop(msg, ISAKMP_NOTIFY_NO_PROPOSAL_CHOSEN, 0, 1, 0);
+ message_drop(msg, ISAKMP_NOTIFY_INVALID_ID_INFORMATION, 0, 1,
+ 0);
goto cleanup;
}