From a846bf06e8a327387047e3cbcb6993010f45426c Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Tue, 1 Feb 2011 09:24:42 +0100
Subject: [PATCH] Add missing AUTH_RULE for trusted self-signed peer
 certificates

---
 src/libstrongswan/credentials/credential_manager.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/libstrongswan/credentials/credential_manager.c b/src/libstrongswan/credentials/credential_manager.c
index 91ed3cfb4..27b97eab3 100644
--- a/src/libstrongswan/credentials/credential_manager.c
+++ b/src/libstrongswan/credentials/credential_manager.c
@@ -716,6 +716,11 @@ METHOD(enumerator_t, trusted_enumerate, bool,
 				DBG1(DBG_CFG, "  using trusted certificate \"%Y\"",
 					 this->pretrusted->get_subject(this->pretrusted));
 				*cert = this->pretrusted;
+				if (!this->auth->get(this->auth, AUTH_RULE_SUBJECT_CERT))
+				{	/* add cert to auth info, if not returned by trustchain */
+					this->auth->add(this->auth, AUTH_RULE_SUBJECT_CERT,
+									this->pretrusted->get_ref(this->pretrusted));
+				}
 				if (auth)
 				{
 					*auth = this->auth;