introduced xauth_identity keyword
This commit is contained in:
@@ -230,6 +230,7 @@ static const token_info_t token_info[] =
|
||||
{ ARG_TIME, offsetof(starter_conn_t, inactivity), NULL },
|
||||
{ ARG_MISC, 0, NULL /* KW_MODECONFIG */ },
|
||||
{ ARG_MISC, 0, NULL /* KW_XAUTH */ },
|
||||
{ ARG_STR, offsetof(starter_conn_t, xauth_identity), NULL },
|
||||
{ ARG_ENUM, offsetof(starter_conn_t, me_mediation), LST_bool },
|
||||
{ ARG_STR, offsetof(starter_conn_t, me_mediated_by), NULL },
|
||||
{ ARG_STR, offsetof(starter_conn_t, me_peerid), NULL },
|
||||
|
||||
@@ -110,6 +110,7 @@ struct starter_conn {
|
||||
u_int32_t eap_type;
|
||||
u_int32_t eap_vendor;
|
||||
char *eap_identity;
|
||||
char *xauth_identity;
|
||||
lset_t policy;
|
||||
time_t sa_ike_life_seconds;
|
||||
time_t sa_ipsec_life_seconds;
|
||||
|
||||
@@ -93,6 +93,7 @@ typedef enum {
|
||||
KW_INACTIVITY,
|
||||
KW_MODECONFIG,
|
||||
KW_XAUTH,
|
||||
KW_XAUTH_IDENTITY,
|
||||
KW_MEDIATION,
|
||||
KW_MEDIATED_BY,
|
||||
KW_ME_PEERID,
|
||||
|
||||
@@ -84,6 +84,7 @@ dpdaction, KW_DPDACTION
|
||||
inactivity, KW_INACTIVITY
|
||||
modeconfig, KW_MODECONFIG
|
||||
xauth, KW_XAUTH
|
||||
xauth_identity, KW_XAUTH_IDENTITY
|
||||
mediation, KW_MEDIATION
|
||||
mediated_by, KW_MEDIATED_BY
|
||||
me_peerid, KW_ME_PEERID
|
||||
|
||||
@@ -93,6 +93,7 @@ static int send_whack_msg (whack_message_t *msg)
|
||||
|| !pack_str(&msg->sc_data, &str_next, &str_roof)
|
||||
|| !pack_str(&msg->whack_lease_ip, &str_next, &str_roof)
|
||||
|| !pack_str(&msg->whack_lease_id, &str_next, &str_roof)
|
||||
|| !pack_str(&msg->xauth_identity, &str_next, &str_roof)
|
||||
|| (str_roof - str_next < msg->keyval.len))
|
||||
{
|
||||
plog("send_wack_msg(): can't pack strings");
|
||||
@@ -285,6 +286,7 @@ int starter_whack_add_conn(starter_conn_t *conn)
|
||||
msg.sa_rekey_fuzz = conn->sa_rekey_fuzz;
|
||||
msg.sa_keying_tries = conn->sa_keying_tries;
|
||||
msg.policy = conn->policy;
|
||||
msg.xauth_identity = conn->xauth_identity;
|
||||
|
||||
/*
|
||||
* Make sure the IKEv2-only policy bits are unset for IKEv1 connections
|
||||
|
||||
Reference in New Issue
Block a user