denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

stroke: support %dynamic in left/rightsubnet for dynamic selectors

Browse Source 
This has the same meaning as omitting left/rightsubnet, i.e. replace it
by the IKE address. Supporting %dynamic allows configurations with multiple
dynamic selectors in a left/rightsubnet, each with potentially different
proto/port selectors.
This commit is contained in:
Martin Willi
2013-06-19 16:36:01 +02:00
parent 3d1af879d2
commit 483a258ad8
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/stroke/stroke_config.c
+10 -2
View File
@@ -1020,8 +1020,16 @@ static void add_ts(private_stroke_config_t *this,
continue; continue;
} }
} }
ts = traffic_selector_create_from_cidr(subnet, proto, if (streq(subnet, "%dynamic"))
from_port, to_port); {
ts = traffic_selector_create_dynamic(proto,
from_port, to_port);
}
else
{
ts = traffic_selector_create_from_cidr(subnet, proto,
from_port, to_port);
}
if (ts) if (ts)
{ {
child_cfg->add_traffic_selector(child_cfg, local, ts); child_cfg->add_traffic_selector(child_cfg, local, ts);