denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Do not log potentially hundreds of cert requests for unknown CAs at level 1

Browse Source
This commit is contained in:
Martin Willi
2011-01-28 08:29:23 +01:00
parent 60b71def1a
commit 5c89a00f05
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/tasks/ike_cert_pre.c
+8 -1
View File
@@ -76,6 +76,7 @@ static void process_certreqs(private_ike_cert_pre_t *this, message_t *message)
{ {
certreq_payload_t *certreq = (certreq_payload_t*)payload; certreq_payload_t *certreq = (certreq_payload_t*)payload;
enumerator_t *enumerator; enumerator_t *enumerator;
u_int unknown = 0;
chunk_t keyid; chunk_t keyid;
this->ike_sa->set_condition(this->ike_sa, COND_CERTREQ_SEEN, TRUE); this->ike_sa->set_condition(this->ike_sa, COND_CERTREQ_SEEN, TRUE);
@@ -103,12 +104,18 @@ static void process_certreqs(private_ike_cert_pre_t *this, message_t *message)
} }
else else
{ {
DBG1(DBG_IKE, "received cert request for unknown ca " DBG2(DBG_IKE, "received cert request for unknown ca "
"with keyid %Y", id); "with keyid %Y", id);
unknown++;
} }
id->destroy(id); id->destroy(id);
} }
enumerator->destroy(enumerator); enumerator->destroy(enumerator);
if (unknown)
{
DBG1(DBG_IKE, "received %u cert requests for an unknown ca",
unknown);
}
break; break;
} }
case NOTIFY: case NOTIFY: