update_peerid() does not accept %any as a certificate's subjectAltName
This commit is contained in:
@@ -209,7 +209,7 @@ static peer_cfg_t *get_peer_cfg_by_name(private_stroke_config_t *this, char *nam
|
|||||||
*/
|
*/
|
||||||
static identification_t *update_peerid(certificate_t *cert, identification_t *id)
|
static identification_t *update_peerid(certificate_t *cert, identification_t *id)
|
||||||
{
|
{
|
||||||
if (!cert->has_subject(cert, id))
|
if (id->get_type(id) == ID_ANY || !cert->has_subject(cert, id))
|
||||||
{
|
{
|
||||||
DBG1(DBG_CFG, " peerid %D not confirmed by certificate, "
|
DBG1(DBG_CFG, " peerid %D not confirmed by certificate, "
|
||||||
"defaulting to subject DN", id);
|
"defaulting to subject DN", id);
|
||||||
|
|||||||
Reference in New Issue
Block a user