denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use AUTH_RULE_IDENTITY_LOOSE in NetworkManager backend

Browse Source
This commit is contained in:
Tobias Brunner
2012-09-18 14:40:40 +02:00
parent e596d0ef1e
commit e6fcc172f8
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon-nm/nm/nm_service.c
+3 -1
View File
@@ -277,7 +277,7 @@ static gboolean connect_(NMVPNPlugin *plugin, NMConnection *connection,
auth_class_t auth_class = AUTH_CLASS_EAP; auth_class_t auth_class = AUTH_CLASS_EAP;
certificate_t *cert = NULL; certificate_t *cert = NULL;
x509_t *x509; x509_t *x509;
bool agent = FALSE, smartcard = FALSE; bool agent = FALSE, smartcard = FALSE, loose_gateway_id = FALSE;
lifetime_cfg_t lifetime = { lifetime_cfg_t lifetime = {
.time = { .time = {
.life = 10800 /* 3h */, .life = 10800 /* 3h */,
@@ -380,6 +380,7 @@ static gboolean connect_(NMVPNPlugin *plugin, NMConnection *connection,
* included in the gateway certificate. */ * included in the gateway certificate. */
gateway = identification_create_from_string((char*)address); gateway = identification_create_from_string((char*)address);
DBG1(DBG_CFG, "using CA certificate, gateway identity '%Y'", gateway); DBG1(DBG_CFG, "using CA certificate, gateway identity '%Y'", gateway);
loose_gateway_id = TRUE;
} }
if (auth_class == AUTH_CLASS_EAP) if (auth_class == AUTH_CLASS_EAP)
@@ -519,6 +520,7 @@ static gboolean connect_(NMVPNPlugin *plugin, NMConnection *connection,
auth = auth_cfg_create(); auth = auth_cfg_create();
auth->add(auth, AUTH_RULE_AUTH_CLASS, AUTH_CLASS_PUBKEY); auth->add(auth, AUTH_RULE_AUTH_CLASS, AUTH_CLASS_PUBKEY);
auth->add(auth, AUTH_RULE_IDENTITY, gateway); auth->add(auth, AUTH_RULE_IDENTITY, gateway);
auth->add(auth, AUTH_RULE_IDENTITY_LOOSE, loose_gateway_id);
peer_cfg->add_auth_cfg(peer_cfg, auth, FALSE); peer_cfg->add_auth_cfg(peer_cfg, auth, FALSE);
child_cfg = child_cfg_create(priv->name, &lifetime, child_cfg = child_cfg_create(priv->name, &lifetime,