From c13eb73719958e004cf8ae362f3801a3f3f243b0 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 12 May 2015 17:49:46 +0200 Subject: [PATCH] vici: Don't redirect all SAs if no selectors are given This avoid confusion and redirecting all SAs can now easily be done explicitly (e.g. peer_ip=0.0.0.0/0). --- src/libcharon/plugins/vici/vici_control.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libcharon/plugins/vici/vici_control.c b/src/libcharon/plugins/vici/vici_control.c index d619a8028..c526d2fda 100644 --- a/src/libcharon/plugins/vici/vici_control.c +++ b/src/libcharon/plugins/vici/vici_control.c @@ -451,7 +451,7 @@ CALLBACK(redirect, vici_message_t*, } if (!peer_ip && !peer_id && !ike && !ike_id) { - DBG1(DBG_CFG, "vici redirect all IKE_SAs to '%Y'", gateway); + return send_reply(this, "missing redirect selector"); } sas = charon->controller->create_ike_sa_enumerator(charon->controller, TRUE);