CVSROOT: /cvs
Module name: src
Changes by: r...@cvs.openbsd.org 2017/03/27 04:21:19
Modified files:
sbin/iked : iked.h ikev2.c ikev2_msg.c ikev2_pld.c types.h
Log message:
Add support to reflect the responder IKEv2 COOKIE.
This fixes connecting to Azure VPN and other implementations that
implement the IKEv2 COOKIE mechanism on the responder side. Azure
decides to send you a responder COOKIE after too many connection
attempts - we have to keep it and reflect it to establish a
connection. This implementation is only for the initiator (client)
side, we do not support sending COOKIEs on the responder (server) side
yet.
OK patrick@ mikeb@
