denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

stroke: ignore a leftsourceip if a rightsourceip is given as well

Browse Source 
As we always negotiate virtual IPs in charon, having both left- and
rightsourceip is not allowed. Both in IKEv1 and IKEv2 we support a single
configuration payload exchange only.
This commit is contained in:
Martin Willi
2013-09-04 10:33:38 +02:00
parent 16149401e9
commit a858064455
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/stroke/stroke_config.c
+7 -1
View File
@@ -781,7 +781,13 @@ static peer_cfg_t *build_peer_cfg(private_stroke_config_t *this,
enumerator->destroy(enumerator); enumerator->destroy(enumerator);
} }
if (msg->add_conn.me.sourceip) if (msg->add_conn.me.sourceip && msg->add_conn.other.sourceip)
{
DBG1(DBG_CFG, "'%s' has both left- and rightsourceip, but IKE can "
"negotiate one virtual IP only, ignoring local virtual IP",
msg->add_conn.name);
}
else if (msg->add_conn.me.sourceip)
{ {
enumerator_t *enumerator; enumerator_t *enumerator;
char *token; char *token;