Since ikev2_init_recv() is supposed to only handle responses to an

Since ikev2_init_recv() is supposed to only handle responses to an
exchange that we initiatiated, we are not allowed to respond to such
a msg.  Also we don't need the DH check in ikev2_sa_initiator_dh() as
it's only called when we initiate, so the check would not run, or when
we get a Create Child SA response, where an error should only lead to
us having another attempt at an exchange.

Found by and ok markus@