Fix DNS error handling for keyexchange=ike.
starter fails to load a connection when a peer's DNS name is temporarily unresolvable and keyexchange=ike was specified, which defaults to IKEv2. The connection loads just fine in case of keyexchange=ikev2.
This commit is contained in:
committed by
Tobias Brunner
parent
f0a8bf47f7
commit
f3da58aaa9
@@ -466,7 +466,7 @@ static void handle_dns_failure(const char *label, starter_end_t *end,
|
|||||||
plog("# fallback to %s=%%any due to '%%' prefix or %sallowany=yes",
|
plog("# fallback to %s=%%any due to '%%' prefix or %sallowany=yes",
|
||||||
label, label);
|
label, label);
|
||||||
}
|
}
|
||||||
else if (!end->host || conn->keyexchange != KEY_EXCHANGE_IKEV2)
|
else if (!end->host || conn->keyexchange == KEY_EXCHANGE_IKEV1)
|
||||||
{
|
{
|
||||||
/* declare an error */
|
/* declare an error */
|
||||||
cfg->err++;
|
cfg->err++;
|
||||||
|
|||||||
Reference in New Issue
Block a user