denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity>

Browse Source
This commit is contained in:
Tobias Brunner
2012-09-18 14:40:41 +02:00
parent e6fcc172f8
commit b7a500e985
2 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/stroke/stroke_config.c
+10
View File
@@ -377,6 +377,7 @@ static auth_cfg_t *build_auth_cfg(private_stroke_config_t *this,
char *auth, *id, *pubkey, *cert, *ca, *groups;
stroke_end_t *end, *other_end;
auth_cfg_t *cfg;
bool loose = FALSE;
/* select strings */
if (local)
@@ -419,6 +420,11 @@ static auth_cfg_t *build_auth_cfg(private_stroke_config_t *this,
ca = other_end->ca2;
}
}
if (id && *id == '%' && !streq(id, "%any"))
{ /* has only an effect on rightid/2 */
loose = !local;
id++;
}
if (!auth)
{
@@ -470,6 +476,10 @@ static auth_cfg_t *build_auth_cfg(private_stroke_config_t *this,
if (identity->get_type(identity) != ID_ANY)
{
cfg->add(cfg, AUTH_RULE_IDENTITY, identity);
if (loose)
{
cfg->add(cfg, AUTH_RULE_IDENTITY_LOOSE, TRUE);
}
}
else
{