denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vici: Don't redirect all SAs if no selectors are given

Browse Source 
This avoid confusion and redirecting all SAs can now easily be done
explicitly (e.g. peer_ip=0.0.0.0/0).
This commit is contained in:
Tobias Brunner
2016-03-04 16:03:00 +01:00
parent 27074f3155
commit c13eb73719
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/vici/vici_control.c
+1 -1
View File
@@ -451,7 +451,7 @@ CALLBACK(redirect, vici_message_t*,
} }
if (!peer_ip && !peer_id && !ike && !ike_id) if (!peer_ip && !peer_id && !ike && !ike_id)
{ {
DBG1(DBG_CFG, "vici redirect all IKE_SAs to '%Y'", gateway); return send_reply(this, "missing redirect selector");
} }
sas = charon->controller->create_ike_sa_enumerator(charon->controller, TRUE); sas = charon->controller->create_ike_sa_enumerator(charon->controller, TRUE);