denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use IP address as ID as responder if not configured or no IDr received.

Browse Source
This commit is contained in:
Tobias Brunner
2012-04-16 14:09:51 +02:00
parent b241a37411
commit 7fd6c078b6
1 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/tasks/ike_auth.c
+11 -3
View File
@@ -695,9 +695,17 @@ METHOD(task_t, build_r, status_t,
if (id->get_type(id) == ID_ANY)
{ /* no IDr received, apply configured ID */
if (!id_cfg || id_cfg->contains_wildcards(id_cfg))
{
DBG1(DBG_CFG, "IDr not configured and negotiation failed");
goto peer_auth_failed;
{ /* no ID configured, use local IP address */
host_t *me;
DBG1(DBG_CFG, "no IDr configured, fall back on IP address");
me = this->ike_sa->get_my_host(this->ike_sa);
id_cfg = identification_create_from_sockaddr(
me->get_sockaddr(me));
if (!cfg->replace_value(cfg, AUTH_RULE_IDENTITY, id_cfg))
{
cfg->add(cfg, AUTH_RULE_IDENTITY, id_cfg);
}
}
this->ike_sa->set_my_id(this->ike_sa, id_cfg->clone(id_cfg));
id = id_cfg;