Fix DNS error handling for keyexchange=ike.

starter fails to load a connection when a peer's DNS name is temporarily
unresolvable and keyexchange=ike was specified, which defaults to IKEv2.
The connection loads just fine in case of keyexchange=ikev2.
This commit is contained in:
Mirko Parthey
2011-10-25 09:44:17 +02:00
committed by Tobias Brunner
parent f0a8bf47f7
commit f3da58aaa9
+1 -1
View File
@@ -466,7 +466,7 @@ static void handle_dns_failure(const char *label, starter_end_t *end,
plog("# fallback to %s=%%any due to '%%' prefix or %sallowany=yes",
label, label);
}
else if (!end->host || conn->keyexchange != KEY_EXCHANGE_IKEV2)
else if (!end->host || conn->keyexchange == KEY_EXCHANGE_IKEV1)
{
/* declare an error */
cfg->err++;