update_peerid() does not accept %any as a certificate's subjectAltName

This commit is contained in:
Andreas Steffen
2008-07-09 22:13:39 +00:00
parent e7991a2eef
commit 858a9fd584
+1 -1
View File
@@ -209,7 +209,7 @@ static peer_cfg_t *get_peer_cfg_by_name(private_stroke_config_t *this, char *nam
*/
static identification_t *update_peerid(certificate_t *cert, identification_t *id)
{
if (!cert->has_subject(cert, id))
if (id->get_type(id) == ID_ANY || !cert->has_subject(cert, id))
{
DBG1(DBG_CFG, " peerid %D not confirmed by certificate, "
"defaulting to subject DN", id);