From 2133593696afd42ea70c2d76b8bbaf4f4b5afa30 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Fri, 17 Aug 2007 07:21:26 +0000 Subject: [PATCH] matching_request instead of matching_trust must go into the metric --- src/pluto/connections.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/pluto/connections.c b/src/pluto/connections.c index 34764ebd6..f4c712e03 100644 --- a/src/pluto/connections.c +++ b/src/pluto/connections.c @@ -3352,7 +3352,7 @@ refine_host_connection(const struct state *st, const struct id *peer_id , d->spd.this.ca, &our_pathlen); bool match = matching_id && matching_auth && matching_trust; - int prio = (MAX_WILDCARDS + 1) * !matching_trust + wildcards; + int prio = (MAX_WILDCARDS + 1) * !matching_request + wildcards; prio = (MAX_CA_PATH_LEN + 1) * prio + peer_pathlen; prio = (MAX_CA_PATH_LEN + 1) * prio + our_pathlen;