From b8f02fc42d07c522730e0227849b11e3982ef7d7 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 7 Apr 2020 16:59:28 +0200 Subject: [PATCH] ikev1: Store fallback identity (IP address) on IKE_SA's auth-cfg The other auth-cfg object is shared via peer-cfg, so we must not modify it. It's only stored to simplify memory management. Fixes #3394. --- src/libcharon/sa/ikev1/phase1.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/libcharon/sa/ikev1/phase1.c b/src/libcharon/sa/ikev1/phase1.c index f3c053d36..18eec7a1b 100644 --- a/src/libcharon/sa/ikev1/phase1.c +++ b/src/libcharon/sa/ikev1/phase1.c @@ -629,6 +629,7 @@ METHOD(phase1_t, get_id, identification_t*, if (!me->is_anyaddr(me)) { id = identification_create_from_sockaddr(me->get_sockaddr(me)); + auth = this->ike_sa->get_auth_cfg(this->ike_sa, TRUE); auth->add(auth, AUTH_RULE_IDENTITY, id); } }