From f3da58aaa926e633e01c3a8abcc65d0b76939dea Mon Sep 17 00:00:00 2001 From: Mirko Parthey Date: Tue, 25 Oct 2011 01:25:15 +0200 Subject: [PATCH] Fix DNS error handling for keyexchange=ike. starter fails to load a connection when a peer's DNS name is temporarily unresolvable and keyexchange=ike was specified, which defaults to IKEv2. The connection loads just fine in case of keyexchange=ikev2. --- src/starter/confread.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/starter/confread.c b/src/starter/confread.c index 5f96fb1bc..089be1aa5 100644 --- a/src/starter/confread.c +++ b/src/starter/confread.c @@ -466,7 +466,7 @@ static void handle_dns_failure(const char *label, starter_end_t *end, plog("# fallback to %s=%%any due to '%%' prefix or %sallowany=yes", label, label); } - else if (!end->host || conn->keyexchange != KEY_EXCHANGE_IKEV2) + else if (!end->host || conn->keyexchange == KEY_EXCHANGE_IKEV1) { /* declare an error */ cfg->err++;