X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=src%2Fprotocol_key.c;h=802f7ca68d5f2707fb6eaed2ce47990d810d3a60;hp=fbd3c16f570ad27161717ee26b7b5f5d9bf63e2f;hb=6dfdb323612184529b4b83c1be914dda8262de47;hpb=9e76c464b26b066e1eb3aa5232e573792e28020d

diff --git a/src/protocol_key.c b/src/protocol_key.c
index fbd3c16f..802f7ca6 100644
--- a/src/protocol_key.c
+++ b/src/protocol_key.c
@@ -334,6 +334,9 @@ bool ans_key_h(connection_t *c, const char *request) {
 		return send_request(to->nexthop->connection, "%s", request);
 	}
 
+	/* Don't use key material until every check has passed. */
+	from->status.validkey = false;
+
 	if(compression < 0 || compression > 11) {
 		logger(DEBUG_ALWAYS, LOG_ERR, "Node %s (%s) uses bogus compression level!", from->name, from->hostname);
 		return true;