Commit 6894b33e6d for strongswan.org

commit 6894b33e6db857ee4fbf1ed0405a0a7ad95945b2
Author: Tobias Brunner <tobias@strongswan.org>
Date:   Mon Jul 20 16:30:39 2026 +0200

    child-create: Don't fail creating IKE SA if only Child SA installation fails

    Fixes: d7760416d62d ("child-create: Add support for multiple key exchanges")

diff --git a/src/libcharon/sa/ikev2/tasks/child_create.c b/src/libcharon/sa/ikev2/tasks/child_create.c
index 13ea7be479..dbde6ff91e 100644
--- a/src/libcharon/sa/ikev2/tasks/child_create.c
+++ b/src/libcharon/sa/ikev2/tasks/child_create.c
@@ -2226,13 +2226,13 @@ static bool key_exchange_done_and_install_r(private_child_create_t *this,
 			case SUCCESS:
 				break;
 			case NOT_FOUND:
-				message->add_notify(message, TRUE, TS_UNACCEPTABLE,
+				message->add_notify(message, FALSE, TS_UNACCEPTABLE,
 									chunk_empty);
 				handle_child_sa_failure(this, message);
 				return TRUE;
 			case FAILED:
 			default:
-				message->add_notify(message, TRUE, NO_PROPOSAL_CHOSEN,
+				message->add_notify(message, FALSE, NO_PROPOSAL_CHOSEN,
 									chunk_empty);
 				handle_child_sa_failure(this, message);
 				return TRUE;