ikev2: fix gcm in ike protocol 63/26163/1
authorFilip Tehlar <ftehlar@cisco.com>
Wed, 25 Mar 2020 09:36:32 +0000 (09:36 +0000)
committerFilip Tehlar <ftehlar@cisco.com>
Wed, 25 Mar 2020 09:37:57 +0000 (09:37 +0000)
Type: fix

Change-Id: I746b94f494d059d2db5f47638c9f4e6bc4eb4045
Signed-off-by: Filip Tehlar <ftehlar@cisco.com>
src/plugins/ikev2/ikev2.c

index bdc234a..3378983 100644 (file)
@@ -2761,7 +2761,7 @@ ikev2_set_initiator_proposals (vlib_main_t * vm, ikev2_sa_t * sa,
       return r;
     }
 
-  if (IKEV2_TRANSFORM_ENCR_TYPE_AES_GCM_16 != ts->crypto_alg)
+  if (is_ike || IKEV2_TRANSFORM_ENCR_TYPE_AES_GCM_16 != ts->crypto_alg)
     {
       /* Integrity */
       error = 1;