denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

signature in connectivity checks is now built with the message id in network byte order

Browse Source
This commit is contained in:
Tobias Brunner
2008-04-08 13:45:30 +00:00
parent 5df92bba51
commit 4a96521965
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/sa/connect_manager.c
+4 -1
View File
@@ -754,6 +754,7 @@ static void prune_pairs(linked_list_t *pairs)
*/ */
static void build_pairs(check_list_t *checklist) static void build_pairs(check_list_t *checklist)
{ {
/* FIXME: limit endpoints and pairs */
iterator_t *iterator_i, *iterator_r; iterator_t *iterator_i, *iterator_r;
endpoint_notify_t *initiator, *responder; endpoint_notify_t *initiator, *responder;
@@ -864,10 +865,12 @@ static status_t process_payloads(message_t *message, check_t *check)
static chunk_t build_signature(private_connect_manager_t *this, static chunk_t build_signature(private_connect_manager_t *this,
check_list_t *checklist, check_t *check, bool outbound) check_list_t *checklist, check_t *check, bool outbound)
{ {
u_int32_t mid;
chunk_t mid_chunk, key_chunk, sig_chunk; chunk_t mid_chunk, key_chunk, sig_chunk;
chunk_t sig_hash; chunk_t sig_hash;
mid_chunk = chunk_from_thing(check->mid); mid = htonl(check->mid);
mid_chunk = chunk_from_thing(mid);
key_chunk = (checklist->is_initiator && outbound) || (!checklist->is_initiator && !outbound) key_chunk = (checklist->is_initiator && outbound) || (!checklist->is_initiator && !outbound)
? checklist->initiator.key : checklist->responder.key; ? checklist->initiator.key : checklist->responder.key;