From: Filip Tehlar <ftehlar@cisco.com>
Date: Wed, 25 Mar 2020 09:36:32 +0000 (+0000)
Subject: ikev2: fix gcm in ike protocol
X-Git-Tag: v20.09-rc0~338
X-Git-Url: https://gerrit.fd.io/r/gitweb?a=commitdiff_plain;h=138676b60944050c6c775f8d16cc2cf3fa3c08df;p=vpp.git

ikev2: fix gcm in ike protocol

Type: fix

Change-Id: I746b94f494d059d2db5f47638c9f4e6bc4eb4045
Signed-off-by: Filip Tehlar <ftehlar@cisco.com>
---

diff --git a/src/plugins/ikev2/ikev2.c b/src/plugins/ikev2/ikev2.c
index bdc234a0239..33789833d65 100644
--- a/src/plugins/ikev2/ikev2.c
+++ b/src/plugins/ikev2/ikev2.c
@@ -2761,7 +2761,7 @@ ikev2_set_initiator_proposals (vlib_main_t * vm, ikev2_sa_t * sa,
       return r;
     }
 
-  if (IKEV2_TRANSFORM_ENCR_TYPE_AES_GCM_16 != ts->crypto_alg)
+  if (is_ike || IKEV2_TRANSFORM_ENCR_TYPE_AES_GCM_16 != ts->crypto_alg)
     {
       /* Integrity */
       error = 1;