denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed IDi in case neither left nor leftid is configured.

Browse Source
This commit is contained in:
Tobias Brunner
2012-04-16 13:44:27 +02:00
parent 7b910ce274
commit 4b32bde48e
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/tasks/ike_auth.c
+21
View File
@@ -422,6 +422,27 @@ METHOD(task_t, build_i, status_t,
DBG1(DBG_CFG, "configuration misses IDi"); DBG1(DBG_CFG, "configuration misses IDi");
return FAILED; return FAILED;
} }
else if (idi->get_type(idi) == ID_ANY)
{ /* ID_ANY is invalid as IDi, use local IP address instead */
enumerator_t *enumerator;
auth_rule_t rule;
host_t *me;
void *data;
me = this->ike_sa->get_my_host(this->ike_sa);
idi = identification_create_from_sockaddr(me->get_sockaddr(me));
enumerator = cfg->create_enumerator(cfg);
while (enumerator->enumerate(enumerator, &rule, &data))
{
if (rule == AUTH_RULE_IDENTITY)
{
cfg->replace(cfg, enumerator, AUTH_RULE_IDENTITY,
idi);
break;
}
}
enumerator->destroy(enumerator);
}
this->ike_sa->set_my_id(this->ike_sa, idi->clone(idi)); this->ike_sa->set_my_id(this->ike_sa, idi->clone(idi));
id_payload = id_payload_create_from_identification(ID_INITIATOR, idi); id_payload = id_payload_create_from_identification(ID_INITIATOR, idi);
get_reserved_id_bytes(this, id_payload); get_reserved_id_bytes(this, id_payload);