vici: Don't redirect all SAs if no selectors are given

This avoid confusion and redirecting all SAs can now easily be done
explicitly (e.g. peer_ip=0.0.0.0/0).
This commit is contained in:
Tobias Brunner
2016-03-04 16:03:00 +01:00
parent 27074f3155
commit c13eb73719
+1 -1
View File
@@ -451,7 +451,7 @@ CALLBACK(redirect, vici_message_t*,
}
if (!peer_ip && !peer_id && !ike && !ike_id)
{
DBG1(DBG_CFG, "vici redirect all IKE_SAs to '%Y'", gateway);
return send_reply(this, "missing redirect selector");
}
sas = charon->controller->create_ike_sa_enumerator(charon->controller, TRUE);