Add support for INVALID_KE_PAYLOAD in CREATE_CHILD_SA
authortobhe <tobhe@openbsd.org>
Thu, 21 Jan 2021 16:46:47 +0000 (16:46 +0000)
committertobhe <tobhe@openbsd.org>
Thu, 21 Jan 2021 16:46:47 +0000 (16:46 +0000)
commit975f0a0ec631ff3b5d26123995132412838d6820
treea959c276db2a592764000e753aace2392e1e4247
parentf1ecec2e457b0f86d45ab1ea7d3205746412fc47
Add support for INVALID_KE_PAYLOAD in CREATE_CHILD_SA
exchange.  In the case of an invalid KE error, retry
CREATE_CHILD_SA exchange with different group instead
of restarting the full IKE handshake.

ok markus@
sbin/iked/config.c
sbin/iked/iked.h
sbin/iked/ikev2.c