denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

charon-xpc: Set AUTH_RULE_IDENTITY_LOOSE on responder config

Browse Source 
This allows the server to use a different IKE identity as long as the
configured hostname is contained in the certificate.
This commit is contained in:
Martin Willi
2013-11-01 12:05:48 +01:00
parent b76e96e2ef
commit 10900ed7e7
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/frontends/osx/charon-xpc/xpc_dispatch.c
+4
View File
@@ -110,6 +110,10 @@ static void add_auth_cfg(peer_cfg_t *peer_cfg, bool local,
auth = auth_cfg_create(); auth = auth_cfg_create();
auth->add(auth, AUTH_RULE_AUTH_CLASS, class); auth->add(auth, AUTH_RULE_AUTH_CLASS, class);
auth->add(auth, AUTH_RULE_IDENTITY, identification_create_from_string(id)); auth->add(auth, AUTH_RULE_IDENTITY, identification_create_from_string(id));
if (!local)
{
auth->add(auth, AUTH_RULE_IDENTITY_LOOSE, TRUE);
}
peer_cfg->add_auth_cfg(peer_cfg, auth, local); peer_cfg->add_auth_cfg(peer_cfg, auth, local);
} }