diff options
| author |   niklas <niklas@openbsd.org> | 1999-04-06 17:08:53 +0000 |
|---|---|---|
| committer | niklas <niklas@openbsd.org> | 1999-04-06 17:08:53 +0000 |
| commit | a484071c4c4bfb7d7b814123685beeb53a7ffea6 (patch) | |
| tree | 166054d1c5e05a7d154d27a41c982593fb21b2c3 | |
| parent | Merge with EOM 1.5 (diff) | |
| download | wireguard-openbsd-a484071c4c4bfb7d7b814123685beeb53a7ffea6.tar.xz wireguard-openbsd-a484071c4c4bfb7d7b814123685beeb53a7ffea6.zip | |
Merge with EOM 1.81
Too much removed in last commit
Actually save the DH values in inititor mode
Non-PFS case for initiators bailed out wrongly.
| -rw-r--r-- | sbin/isakmpd/ike_quick_mode.c | 12 |
1 files changed, 5 insertions, 7 deletions
diff --git a/sbin/isakmpd/ike_quick_mode.c b/sbin/isakmpd/ike_quick_mode.c index 6ce58c86c6b..75d49c7a2c7 100644 --- a/sbin/isakmpd/ike_quick_mode.c +++ b/sbin/isakmpd/ike_quick_mode.c @@ -1,5 +1,5 @@ -/* $OpenBSD: ike_quick_mode.c,v 1.11 1999/04/05 20:58:52 niklas Exp $ */ -/* $EOM: ike_quick_mode.c,v 1.78 1999/04/05 20:18:32 niklas Exp $ */ +/* $OpenBSD: ike_quick_mode.c,v 1.12 1999/04/06 17:08:53 niklas Exp $ */ +/* $EOM: ike_quick_mode.c,v 1.81 1999/04/06 14:11:35 niklas Exp $ */ /* * Copyright (c) 1998, 1999 Niklas Hallqvist. All rights reserved. @@ -502,8 +502,6 @@ initiator_send_HASH_SA_NONCE (struct message *msg) ie->group = 0; return -1; } - group_free (ie->group); - ie->group = 0; } /* Generate optional client ID payloads. XXX Share with responder. */ @@ -725,10 +723,10 @@ initiator_recv_HASH_SA_NONCE (struct message *msg) hashp->flags |= PL_MARK; isa = sa->data; - ie->group = group_get (isa->group_desc); - if (!ie->group) + if ((isa->group_desc && (!ie->group || ie->group->id != isa->group_desc)) + || (!isa->group_desc && ie->group)) { - /* XXX Notify peer? */ + log_print ("initiator_recv_HASH_SA_NONCE: disagreement on PFS"); return -1; } |