From 882ff93bfd0094652862bab001d16bbd4bd8863e Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Thu, 22 Oct 2020 13:13:00 +0200 Subject: [PATCH] proposal: Accept NONE for additional key exchanges also for IKE proposals --- src/libstrongswan/crypto/proposal/proposal.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/libstrongswan/crypto/proposal/proposal.c b/src/libstrongswan/crypto/proposal/proposal.c index ff7884d9a..b8c74906e 100644 --- a/src/libstrongswan/crypto/proposal/proposal.c +++ b/src/libstrongswan/crypto/proposal/proposal.c @@ -324,7 +324,8 @@ static bool select_algo(private_proposal_t *this, proposal_t *other, if (is_ke_transform(type)) { - optional = this->protocol == PROTO_ESP || this->protocol == PROTO_AH; + optional = this->protocol == PROTO_ESP || this->protocol == PROTO_AH || + type != KEY_EXCHANGE_METHOD; } e1 = create_enumerator(this, type);