Include the used reserved bytes from ID payloads in AUTH calculation

This commit is contained in:
Martin Willi
2011-01-05 16:45:53 +01:00
parent 502edf425f
commit 5f15faebc8
12 changed files with 132 additions and 40 deletions
+6 -1
View File
@@ -39,6 +39,11 @@ struct private_pretend_auth_t {
*/
identification_t *id;
/**
* reserved bytes of ID payload
*/
char reserved[3];
/**
* IKE_SA_INIT data for signature
*/
@@ -232,7 +237,7 @@ static bool build_auth(private_pretend_auth_t *this,
}
keymat = ike_sa->get_keymat(ike_sa);
octets = keymat->get_auth_octets(keymat, TRUE, this->ike_init,
this->nonce, this->id);
this->nonce, this->id, this->reserved);
if (!private->sign(private, scheme, octets, &auth_data))
{
chunk_free(&octets);