denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

identification: Clarify that ID_USER_FQDN is just an alias for ID_RFC822_ADDR

Browse Source 
This means userfqdn: is a valid prefix for regular expressions.
This commit is contained in:
Tobias Brunner
2025-06-20 10:37:40 +02:00
parent e58ef258b5
commit a153626af7
4 changed files with 12 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/utils/identification.c
+2 -2
View File
@@ -1828,7 +1828,7 @@ static const struct {
{ "ipv6range:", ID_IPV6_ADDR_RANGE, FALSE},
{ "rfc822:", ID_RFC822_ADDR, TRUE},
{ "email:", ID_RFC822_ADDR, TRUE},
{ "userfqdn:", ID_USER_FQDN, FALSE},
{ "userfqdn:", ID_RFC822_ADDR, TRUE},
{ "fqdn:", ID_FQDN, TRUE},
{ "dns:", ID_FQDN, TRUE},
{ "asn1dn:", ID_DER_ASN1_DN, TRUE},
@@ -2111,7 +2111,7 @@ identification_t *identification_create_from_string(char *string)
}
else if (*string == '@')
{
this = identification_create(ID_USER_FQDN);
this = identification_create(ID_RFC822_ADDR);
this->encoded = chunk_clone(chunk_from_str(string + 1));
return &this->public;
}
src/libstrongswan/utils/identification.h
+3 -3
View File
@@ -336,9 +336,9 @@ identification_t *identification_create_from_string(char *string);
* trusted/configured values, never untrusted values received over the network.
*
* A regular expression must be prefixed by an identity type (supported are
* rfc822:, email:, fqdn:, dns:, and asn1dn:), and it must start with a caret
* ('^') and end with a dollar sign ('$') to indicate an anchored pattern.
* If the regular expression is invalid, the function returns NULL.
* rfc822:, email:, userfqdn:, fqdn:, dns:, and asn1dn:), and it must start
* with a caret ('^') and end with a dollar sign ('$') to indicate an anchored
* pattern. If the regular expression is invalid, the function returns NULL.
*
* The regular expression is always matched against the string representation
* of other identities and matching is performed case-insensitive.