- fixed host-host tunnel traffic selection, host-host works now

src/charon/sa/states/ike_auth_requested.c

@@ -318,7 +318,7 @@ static status_t process_message(private_ike_auth_requested_t *this, message_t *i
 	{
 		this->logger->log(this->logger, CONTROL, "No CHILD_SA requested, no CHILD_SA built");
 	}
-	if (!this->proposal)
+	else if (!this->proposal)
 	{
 		this->logger->log(this->logger, CONTROL, "Proposal negotiation failed, no CHILD_SA built");
 		this->child_sa->destroy(this->child_sa);

src/charon/sa/states/ike_sa_init_requested.c

@@ -225,7 +225,7 @@ static status_t process_message(private_ike_sa_init_requested_t *this, message_t
 	u_int64_t responder_spi;
 	ike_sa_id_t *ike_sa_id;
 	iterator_t *payloads;
-	host_t *me;
+	host_t *me, *other;
 	connection_t *connection;
 	policy_t *policy;
 
@@ -357,9 +357,12 @@ static status_t process_message(private_ike_sa_init_requested_t *this, message_t
 	/* apply the address on wich we really received the packet */
 	connection = this->ike_sa->get_connection(this->ike_sa);
 	me = ike_sa_init_reply->get_destination(ike_sa_init_reply);
+	other = ike_sa_init_reply->get_source(ike_sa_init_reply);
 	connection->update_my_host(connection, me->clone(me));
+	connection->update_other_host(connection, other->clone(other));
 	policy = this->ike_sa->get_policy(this->ike_sa);
 	policy->update_my_ts(policy, me);
+	policy->update_other_ts(policy, other);
 	
 	/*  build empty message */
 	this->ike_sa->build_message(this->ike_sa, IKE_AUTH, TRUE, &request);

src/charon/sa/states/ike_sa_init_responded.c

@@ -411,6 +411,7 @@ static status_t build_idr_payload(private_ike_sa_init_responded_t *this, id_payl
 	my_id = this->policy->get_my_id(this->policy);
 	
 	/* update others traffic selectors with actually used address */
+	this->policy->update_my_ts(this->policy, response->get_source(response));
 	this->policy->update_other_ts(this->policy, response->get_destination(response));
 	
 	/* set policy in ike_sa for other states */