From b9790320885b7f48e20cdf2384cf7e989a78ca70 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Mon, 11 Jan 2010 11:17:40 +0100 Subject: [PATCH] log EAP-only authentication proposal --- src/charon/sa/tasks/ike_auth.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/src/charon/sa/tasks/ike_auth.c b/src/charon/sa/tasks/ike_auth.c index fb79cb20f..f37ce7b34 100644 --- a/src/charon/sa/tasks/ike_auth.c +++ b/src/charon/sa/tasks/ike_auth.c @@ -879,12 +879,14 @@ static status_t process_i(private_ike_auth_t *this, message_t *message) } } else - { /* responder omited AUTH payload, indicating EAP-only */ - if (!this->my_auth || - !this->my_auth->is_mutual(this->my_auth)) + { /* responder omitted AUTH payload, indicating EAP-only */ + if (!this->my_auth || !this->my_auth->is_mutual(this->my_auth)) { + DBG1(DBG_IKE, "do not allow non-mutual or weak " + "EAP-only authentication"); return FAILED; } + DBG1(DBG_IKE, "allow mutual EAP-only authentication"); } } if (this->other_auth)