denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use received identity to look up PSK as aggressive responder

Browse Source
This commit is contained in:
Martin Willi
2012-05-23 12:18:45 +02:00
parent 51754f6654
commit 523ce7c20c
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev1/phase1.c
+9 -2
View File
@@ -131,13 +131,20 @@ static shared_key_t *lookup_shared_key(private_phase1_t *this,
}
if (peer_cfg)
{ /* as initiator, use identities from configuraiton */
{ /* as initiator or aggressive responder, use identities */
my_auth = get_auth_cfg(peer_cfg, TRUE);
other_auth = get_auth_cfg(peer_cfg, FALSE);
if (my_auth && other_auth)
{
my_id = my_auth->get(my_auth, AUTH_RULE_IDENTITY);
other_id = other_auth->get(other_auth, AUTH_RULE_IDENTITY);
if (peer_cfg->use_aggressive(peer_cfg))
{
other_id = this->ike_sa->get_other_id(this->ike_sa);
}
else
{
other_id = other_auth->get(other_auth, AUTH_RULE_IDENTITY);
}
if (my_id && other_id)
{
shared_key = lib->credmgr->get_shared(lib->credmgr, SHARED_IKE,