diff options
| author |   Atzm Watanabe <atzmism@gmail.com> | 2022-08-12 14:29:31 +0900 |
|---|---|---|
| committer |   Beno�t Ganne <bganne@cisco.com> | 2022-08-18 08:03:13 +0000 |
| commit | c65921f7744a0da09ede876b6588628e3a188529 (patch) | |
| tree | fb004fb74260e71a18d245d691c78cc81bb37889 /src/plugins/ikev2/ikev2_priv.h | |
| parent | 138f65c5b7796c6401cde6ff92edc85f02c367a4 (diff) | |
ikev2: accept key exchange on CREATE_CHILD_SA
In RFC 7296, CREATE_CHILD_SA Exchange may contain the KE payload
to enable stronger guarantees of forward secrecy.
When the KEi payload is included in the CREATE_CHILD_SA request,
responder should reply with the KEr payload and complete the key
exchange, in accordance with the RFC.
Type: improvement
Signed-off-by: Atzm Watanabe <atzmism@gmail.com>
Change-Id: I13cf6cf24359c11c3366757e585195bb7e999638
Diffstat (limited to 'src/plugins/ikev2/ikev2_priv.h')
| -rw-r--r-- | src/plugins/ikev2/ikev2_priv.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/plugins/ikev2/ikev2_priv.h b/src/plugins/ikev2/ikev2_priv.h index 379b68dbdfc..4ce147890d5 100644 --- a/src/plugins/ikev2/ikev2_priv.h +++ b/src/plugins/ikev2/ikev2_priv.h @@ -313,6 +313,7 @@ typedef struct typedef struct { u16 notify_type; + u8 kex; u8 protocol_id; u32 spi; u32 ispi; |