denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fall back to local address as IKEv1 identity if nothing else is configured

Browse Source
This commit is contained in:
Tobias Brunner
2012-08-24 12:55:01 +02:00
parent 454fb91367
commit 1184493407
1 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev1/phase1.c
+14 -2
View File
@@ -587,14 +587,26 @@ METHOD(phase1_t, select_config, peer_cfg_t*,
METHOD(phase1_t, get_id, identification_t*, METHOD(phase1_t, get_id, identification_t*,
private_phase1_t *this, peer_cfg_t *peer_cfg, bool local) private_phase1_t *this, peer_cfg_t *peer_cfg, bool local)
{ {
identification_t *id = NULL;
auth_cfg_t *auth; auth_cfg_t *auth;
auth = get_auth_cfg(peer_cfg, local); auth = get_auth_cfg(peer_cfg, local);
if (auth) if (auth)
{ {
return auth->get(auth, AUTH_RULE_IDENTITY); id = auth->get(auth, AUTH_RULE_IDENTITY);
if (local && (!id || id->get_type(id) == ID_ANY))
{ /* no ID configured, use local IP address */
host_t *me;
me = this->ike_sa->get_my_host(this->ike_sa);
if (!me->is_anyaddr(me))
{
id = identification_create_from_sockaddr(me->get_sockaddr(me));
auth->add(auth, AUTH_RULE_IDENTITY, id);
}
}
} }
return NULL; return id;
} }
METHOD(phase1_t, save_sa_payload, bool, METHOD(phase1_t, save_sa_payload, bool,