denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

mode-config: Reassign migrated virtual IP if client requests %any

Browse Source 
If we mistakenly detect a new IKE_SA as a reauthentication the client
won't request the previous virtual IP, but since we already migrated
it we already triggered the assign_vips() hook, so we should reassign
the migrated virtual IP.

Fixes #1152.
This commit is contained in:
Tobias Brunner
2015-11-12 14:42:36 +01:00
parent e161238e8e
commit 322a11ccbb
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev1/tasks/mode_config.c
+3 -1
View File
@@ -482,7 +482,9 @@ static host_t *assign_migrated_vip(linked_list_t *migrated, host_t *requested)
enumerator = migrated->create_enumerator(migrated); enumerator = migrated->create_enumerator(migrated);
while (enumerator->enumerate(enumerator, &vip)) while (enumerator->enumerate(enumerator, &vip))
{ {
if (vip->ip_equals(vip, requested)) if (vip->ip_equals(vip, requested) ||
(requested->is_anyaddr(requested) &&
requested->get_family(requested) == vip->get_family(vip)))
{ {
migrated->remove_at(migrated, enumerator); migrated->remove_at(migrated, enumerator);
found = vip; found = vip;